diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index d63b8fe..c664def 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,6 +7,7 @@ on:
 # Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
 permissions:
   contents: write   # write: upload release assets (html archive, checksum, manifest)
+  actions: read     # dawidd6/action-download-artifact reads the cache.yml build artifact
   pages: write
   id-token: write   # required for OIDC-based Pages deployment