diff --git a/.github/workflows/dummy.yml b/.github/workflows/dummy.yml
index 91c7c25..dc6fa3a 100644
--- a/.github/workflows/dummy.yml
+++ b/.github/workflows/dummy.yml
@@ -5,6 +5,8 @@ on:
 
 concurrency: publish
 
+permissions: read-all
+
 jobs:
   release:  
     runs-on: ubuntu-latest
@@ -12,6 +14,7 @@ jobs:
     - name: Dispatch digital.sbb.ch build
       uses: actions/github-script@v6
       with:
+        github-token: ${{ secrets.DISPATCH_TOKEN }}
         script: |
           await github.rest.repos.createDispatchEvent({
               owner: context.repo.owner,