diff --git a/.github/workflows/lint-pr.yml b/.github/workflows/lint-pr.yml
index 270c10dd..7824583e 100644
--- a/.github/workflows/lint-pr.yml
+++ b/.github/workflows/lint-pr.yml
@@ -1,4 +1,5 @@
 name: Lint PR
+permissions: read-all
 
 on:
   pull_request_target: