diff --git a/.github/workflows/gradle.yml b/.github/workflows/gradle.yml
index 1c3610a..26be25e 100644
--- a/.github/workflows/gradle.yml
+++ b/.github/workflows/gradle.yml
@@ -33,8 +33,9 @@ jobs:
     - name: Setup Gradle
       uses: gradle/actions/setup-gradle@af1da67850ed9a4cedd57bfd976089dd991e2582 # v4.0.0
 
+    # CI环境禁用Gradle Daemon，避免进程异常锁定
     - name: Build with Gradle Wrapper
-      run: ./gradlew build
+      run: ./gradlew build --no-daemon
 
     # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
     # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
@@ -51,7 +52,7 @@ jobs:
 
     runs-on: ubuntu-latest
     permissions:
-      contents: write
+      contents: read
       dependency-graph: write
 
     steps: