diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 868dec4..d72c1b7 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -1,4 +1,3 @@
----
 # This workflow uses actions that are not certified by GitHub.
 # They are provided by a third-party and are governed by
 # separate terms of service, privacy policy, and support
@@ -16,7 +15,7 @@ on:
 
 # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
 permissions:
-  contents: write
+  contents: read
   pages: write
   id-token: write
 
@@ -26,9 +25,9 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-
   # Build job
   build:
+    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && !contains(github.event.head_commit.message, '[skip ci]')) }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -55,6 +54,7 @@ jobs:
 
   # Deployment job
   deploy:
+    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && !contains(github.event.head_commit.message, '[skip ci]')) }}
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}