diff --git a/.github/workflows/ci.yml b/.github/workflows/main.yml
similarity index 95%
rename from .github/workflows/ci.yml
rename to .github/workflows/main.yml
index 2d9f85a..1d8896e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/main.yml
@@ -1,4 +1,4 @@
-name: 'CI'
+name: 'Main'
 
 on:
   push:
@@ -15,6 +15,8 @@ jobs:
   validate-packer:
     name: 'Validate Packer configuration'
     runs-on: 'ubuntu-20.04'
+    permissions:
+      contents: 'read'
     defaults:
       run:
         working-directory: './packer/'
@@ -36,6 +38,8 @@ jobs:
   validate-terraform:
     name: 'Validate Terraform configuration'
     runs-on: 'ubuntu-20.04'
+    permissions:
+      contents: 'read'
     defaults:
       run:
         working-directory: './terraform/'
@@ -61,6 +65,8 @@ jobs:
     name: 'Build Packer image'
     needs: ['validate-packer']
     runs-on: 'ubuntu-20.04'
+    permissions:
+      contents: 'read'
     defaults:
       run:
         working-directory: './packer/'