diff --git a/.github/workflows/mshv-integration.yaml b/.github/workflows/mshv-integration.yaml
index 261b84d54..ad544249e 100644
--- a/.github/workflows/mshv-integration.yaml
+++ b/.github/workflows/mshv-integration.yaml
@@ -1,5 +1,6 @@
 name: Cloud Hypervisor Tests (MSHV) (x86_64)
 on: [pull_request_target, merge_group]
+permissions: {}
 
 jobs:
   infra-setup: