diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index f363e7dc..de7adfdd 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -10,7 +10,7 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
+  contents: read
 
 concurrency:
   group: vercel-production
@@ -39,18 +39,6 @@ jobs:
           cp playground/gosqlx.wasm ../website/public/wasm/
           cp playground/wasm_exec.js ../website/public/wasm/
 
-      - name: Commit rebuilt WASM if changed
-        run: |
-          git config user.name "github-actions[bot]"
-          git config user.email "github-actions[bot]@users.noreply.github.com"
-          git add website/public/wasm/gosqlx.wasm website/public/wasm/wasm_exec.js
-          if git diff --cached --quiet; then
-            echo "WASM unchanged, skipping commit"
-          else
-            git commit -m "chore(wasm): rebuild gosqlx.wasm from updated wasm/ source [skip ci]"
-            git push origin main
-          fi
-
       - name: Setup Node
         uses: actions/setup-node@v4
         with: