diff --git a/.github/workflows/lint-pr.yml b/.github/workflows/lint-pr.yml
index 270c10d..3cd90df 100644
--- a/.github/workflows/lint-pr.yml
+++ b/.github/workflows/lint-pr.yml
@@ -1,4 +1,5 @@
 name: Lint PR
+permissions: read-all
 
 on:
   pull_request_target:
@@ -10,4 +11,4 @@ on:
 
 jobs:
   dry-run:
-    uses: cloudscape-design/actions/.github/workflows/lint-pr.yml@main
\ No newline at end of file
+    uses: cloudscape-design/actions/.github/workflows/lint-pr.yml@main