diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1f152f9de..0312bcd4b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -191,6 +191,9 @@ jobs:
   linux_armv7l:
     needs: process
     if: inputs.linux_armv7l
+    permissions:
+      contents: read
+      actions: write  # For cleaning up cache
     runs-on: ubuntu-24.04-arm
     steps:
       - uses: actions/checkout@v4