diff --git a/ci/msbuild.yml b/ci/msbuild.yml
index 3cd8f01..c50354e 100644
--- a/ci/msbuild.yml
+++ b/ci/msbuild.yml
@@ -15,6 +15,9 @@ env:
   # https://docs.github.com/actions/learn-github-actions/managing-complex-workflows#using-a-build-matrix
   BUILD_CONFIGURATION: Release
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: windows-latest