diff --git a/.github/workflows/desktop-e2e.yml b/.github/workflows/desktop-e2e.yml
index 7632b0bea66..7b87a84bc8d 100644
--- a/.github/workflows/desktop-e2e.yml
+++ b/.github/workflows/desktop-e2e.yml
@@ -10,6 +10,9 @@ name: Desktop E2E
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 concurrency:
   group: desktop-e2e-${{ github.ref }}
   cancel-in-progress: true