diff --git a/.github/workflows/c-cpp.yml b/.github/workflows/c-cpp.yml
index 13d0832be8..7d44737d2e 100644
--- a/.github/workflows/c-cpp.yml
+++ b/.github/workflows/c-cpp.yml
@@ -12,6 +12,9 @@ on:
 
 jobs:
     build:
+        permissions: 
+            actions: read
+            contents: write        
         env:
             EM_VERSION: 3.1.45
             EM_CACHE_FOLDER: "emsdk-cache2"