diff --git a/.github/workflows/deploy-preview.yml b/.github/workflows/deploy-preview.yml
index a600ef8..aed033f 100644
--- a/.github/workflows/deploy-preview.yml
+++ b/.github/workflows/deploy-preview.yml
@@ -3,7 +3,10 @@ on:
   pull_request:
   workflow_dispatch:
 
-permissions: write-all
+permissions:
+  checks: write
+  contents: read
+  pull-requests: write
 
 jobs:
   build_and_preview: