diff --git a/.github/workflows/test_apache_docker.yml b/.github/workflows/test_apache_docker.yml
index 5b79104..c46c605 100644
--- a/.github/workflows/test_apache_docker.yml
+++ b/.github/workflows/test_apache_docker.yml
@@ -1,5 +1,8 @@
 name: Apache with Docker patterns validation
 
+permissions:
+  contents: read  # Needed to read Apache WAF configuration files
+
 on:
   push:
     branches: