diff --git a/.github/workflows/mistcoder-scan.yml b/.github/workflows/mistcoder-scan.yml
index d1148e9..308bd76 100644
--- a/.github/workflows/mistcoder-scan.yml
+++ b/.github/workflows/mistcoder-scan.yml
@@ -20,6 +20,7 @@ on:
 permissions:
   pull-requests: write
   issues: write
+  contents: read
 
 jobs:
   mistcoder-scan:
@@ -184,4 +185,4 @@ jobs:
             sandbox/chain_export.js
             sandbox/oracle_knowledge.json
             sandbox/oracle_signatures.json
-          retention-days: 90
\ No newline at end of file
+          retention-days: 90