diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index ba41210..6da8292 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -3,6 +3,9 @@
 name: Tests
 
 on: [ push, pull_request, workflow_dispatch ]
+permissions:
+  contents: read
+  pull-requests: write
 
 jobs:
   build: