diff --git a/.github/workflows/security-considerations.yml b/.github/workflows/security-considerations.yml
index daf10f9d..bbcc488e 100644
--- a/.github/workflows/security-considerations.yml
+++ b/.github/workflows/security-considerations.yml
@@ -1,5 +1,8 @@
 name: Security Considerations
 
+permissions:
+  pull-requests: read
+
 on:
   pull_request:
     types: [opened, edited, reopened]