diff --git a/.github/workflows/validate-clusters.yaml b/.github/workflows/validate-clusters.yaml
index ed296efaf..9e72b92ab 100644
--- a/.github/workflows/validate-clusters.yaml
+++ b/.github/workflows/validate-clusters.yaml
@@ -37,6 +37,9 @@ on:
       - "**"
   workflow_dispatch:
 
+permissions:
+  packages: read
+
 jobs:
   # This job inspects changed files in order to determine which cluster files
   # should be validated. If helm-chart files change, then all clusters will be