diff --git a/.github/workflows/clear-caches.yml b/.github/workflows/clear-caches.yml
index bbe7737975b..db06ade4b0c 100644
--- a/.github/workflows/clear-caches.yml
+++ b/.github/workflows/clear-caches.yml
@@ -6,12 +6,13 @@ on:
     - cron: '0 6 * * *'
   workflow_dispatch:
 
-permissions:
-  actions: write
+permissions: read-all
 
 jobs:
   clear-cache:
     runs-on: ubuntu-latest
+    permissions:
+      actions: write
     steps:
       - name: Clear Firefox cache
         uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1