diff --git a/.github/workflows/linkcheck.yml b/.github/workflows/linkcheck.yml
index f8ac2d5..a416a0c 100644
--- a/.github/workflows/linkcheck.yml
+++ b/.github/workflows/linkcheck.yml
@@ -9,6 +9,9 @@ jobs:
   link-check-linux:
     name: Link Checking (${{ matrix.python-version }}, ${{ matrix.os }})
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      actions: read     # dawidd6/action-download-artifact reads the cache.yml build artifact
     strategy:
       fail-fast: false
       matrix: