diff --git a/.github/workflows/test-reporter.yml b/.github/workflows/test-reporter.yml
index c4d4bec6..d7bd68fc 100644
--- a/.github/workflows/test-reporter.yml
+++ b/.github/workflows/test-reporter.yml
@@ -8,6 +8,10 @@ on:
     types:
       - completed
 
+permissions:
+  contents: read
+  actions: read
+
 jobs:
   report:
     runs-on: ubuntu-latest