diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 704f7ac..632c143 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -53,6 +53,7 @@ jobs:
       artifact-path: "."
 
   verify:
+    permissions: {}
     needs: [release, sign]
     uses: github/salsa/.github/workflows/verify.yml@main
     with: