diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 9aa71f9..037457b 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,6 +8,10 @@ on:
       - v*
   pull_request:
 
+permissions:
+  contents: read
+  pull-requests: read
+
 defaults:
   run:
     working-directory: cmd/getparty