diff --git a/deployments/tencent.yml b/deployments/tencent.yml
index 2bf2a68..4e9e9f6 100644
--- a/deployments/tencent.yml
+++ b/deployments/tencent.yml
@@ -27,6 +27,9 @@ env:
   TKE_CLUSTER_ID: cls-mywebapp
   DEPLOYMENT_NAME: tke-test
 
+permissions:
+  contents: read
+
 jobs:
   setup-build-publish-deploy:
     name: Setup, Build, Publish, and Deploy