diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index b2ae361c5..52c48ca11 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -7,6 +7,8 @@ on:
 
 permissions:
   statuses: write
+  # this can be remove once the repo is public
+  actions: read
 
 jobs:
   smokeshow: