diff --git a/.github/workflows/codebuild-ci.yml b/.github/workflows/codebuild-ci.yml
index a566fd8d6b..59c070c437 100644
--- a/.github/workflows/codebuild-ci.yml
+++ b/.github/workflows/codebuild-ci.yml
@@ -8,6 +8,7 @@ concurrency:
 
 permissions:
     id-token: write # This is required for requesting the JWT
+    contents: read
 
 jobs:
   codestyle-doc-tests:
@@ -43,4 +44,4 @@ jobs:
           env-vars-for-codebuild: |
             PY_VERSION
         env:
-          PY_VERSION: ${{ matrix.python-version }}
\ No newline at end of file
+          PY_VERSION: ${{ matrix.python-version }}