diff --git a/.github/workflows/label_pull_requests.yml b/.github/workflows/label_pull_requests.yml
index fbebd764..82ebf47a 100644
--- a/.github/workflows/label_pull_requests.yml
+++ b/.github/workflows/label_pull_requests.yml
@@ -10,12 +10,10 @@ name: Label pull request
 on:
 - pull_request
 
-# Declare default permissions as read only.
-permissions: read-all
-
 jobs:
   label:
     permissions:
+      contents: read
       pull-requests: write
     runs-on: ubuntu-latest
     steps: