diff --git a/.github/workflows/validate.yml b/.github/workflows/validate.yml
index 32042cb..2e2cfb2 100644
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -9,7 +9,8 @@ on:
   pull_request:
     branches: [main]
 
-permissions: {}
+permissions:
+  contents: read
 
 jobs:
   hassfest:
@@ -23,6 +24,7 @@ jobs:
     name: HACS validation
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/checkout@v4
       - uses: hacs/action@main
         with:
           category: integration