diff --git a/.github/workflows/test_nginx.yml b/.github/workflows/test_nginx.yml
index 0af4cde..90a7bd9 100644
--- a/.github/workflows/test_nginx.yml
+++ b/.github/workflows/test_nginx.yml
@@ -1,5 +1,8 @@
 name: Nginx patterns validation
 
+permissions:
+  contents: read  # Needed to read repository contents (e.g., WAF rules)
+  
 on:
   push:
     branches: