diff --git a/.github/workflows/auto-spotless-check.yml b/.github/workflows/auto-spotless-check.yml
index 755959dbf..bbe86074b 100644
--- a/.github/workflows/auto-spotless-check.yml
+++ b/.github/workflows/auto-spotless-check.yml
@@ -5,13 +5,13 @@ on:
       - opened
       - synchronize
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
   cancel-in-progress: true
 
-permissions:
-  contents: read
-
 jobs:
   check:
     runs-on: ubuntu-latest