diff --git a/.github/workflows/trufflehog.yml b/.github/workflows/trufflehog.yml
index 415a15ea..7772642f 100644
--- a/.github/workflows/trufflehog.yml
+++ b/.github/workflows/trufflehog.yml
@@ -3,11 +3,13 @@ on:
 
 name: Secret Leaks
 
-permissions:
-  contents: read
+
+permissions: {}
 
 jobs:
   trufflehog:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code