diff --git a/.github/workflows/go-report-card-refresh.yml b/.github/workflows/go-report-card-refresh.yml
index 5cf08df..f6b124f 100644
--- a/.github/workflows/go-report-card-refresh.yml
+++ b/.github/workflows/go-report-card-refresh.yml
@@ -1,4 +1,5 @@
 name: Go Report Card Refresh
+permissions: {}
 on:
   push:
     branches: