diff --git a/.github/workflows/dotnet-publish.yml b/.github/workflows/dotnet-publish.yml
index b22d63d40..b896a7740 100644
--- a/.github/workflows/dotnet-publish.yml
+++ b/.github/workflows/dotnet-publish.yml
@@ -16,8 +16,7 @@ jobs:
   build-test-lint:
     name: Build/Test/Lint
     uses: ./.github/workflows/dotnet-build-test-lint.yml
-    permissions:
-      contents: read
+    permissions: read-all
   publish:
     name: Publish
     needs: build-test-lint