diff --git a/deployments/alibabacloud.yml b/deployments/alibabacloud.yml
index ded9178..c783305 100644
--- a/deployments/alibabacloud.yml
+++ b/deployments/alibabacloud.yml
@@ -40,6 +40,9 @@ env:
   ACR_EE_IMAGE: repo
   ACR_EE_TAG: ${{ github.sha }}
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest