diff --git a/.github/workflows/twitter-bot.yml b/.github/workflows/twitter-bot.yml
index a496b7979263..3880d01c090d 100644
--- a/.github/workflows/twitter-bot.yml
+++ b/.github/workflows/twitter-bot.yml
@@ -3,7 +3,8 @@ on:
   workflow_dispatch:
   release:
     types: [published]
-permissions: {} # none
+permissions:
+  contents: read
 jobs:
   twitter-release:
     runs-on: ubuntu-20.04