diff --git a/.github/workflows/backport.yaml b/.github/workflows/backport.yaml
index 040caea669..160391eb8c 100644
--- a/.github/workflows/backport.yaml
+++ b/.github/workflows/backport.yaml
@@ -21,6 +21,8 @@ on:
       - closed
       - labeled
 
+permissions: {}
+
 # Prevent duplicate runs for the same PR when both 'closed' and 'labeled'
 # fire in quick succession.
 concurrency: