diff --git a/.github/workflows/abc.yml b/.github/workflows/abc.yml
index 2be82e4..ff24dd7 100644
--- a/.github/workflows/abc.yml
+++ b/.github/workflows/abc.yml
@@ -2,6 +2,10 @@ name: Rotate
 
 on:
   workflow_dispatch:
+
+  permissions:
+  contents: read
+  
     inputs:
       target_env:
         description: "Target Azure Environment to deploy to."