diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 46c1cf8..8a52199 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,11 @@
 name: GraTech Enterprise CI
 
+
+permissions:
+  contents: read
+  pull-requests: read
+  checks: write
+
 on: [push, pull_request]
 
 jobs: