diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index bc4d66fb5..1cedc428d 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -9,6 +9,8 @@ on:
 jobs:
   trigger-site-repo-workflow:
     runs-on: ubuntu-latest
+    permissions:
+      actions: read|write
     steps:
     - run: gh workflow run main.yml --ref master --repo haxeflixel/haxeflixel.com
       env: