diff --git a/.github/workflows/semantic-commit.yaml b/.github/workflows/semantic-commit.yaml
index 2a93fb7..30ed837 100644
--- a/.github/workflows/semantic-commit.yaml
+++ b/.github/workflows/semantic-commit.yaml
@@ -4,6 +4,10 @@ on:
   pull_request:
     types: [opened, synchronize, reopened, edited]
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   semantic-commit:
     runs-on: ubuntu-latest