diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index b679020..53898f8 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -12,6 +12,8 @@ name: Pull Request checks
       - synchronize
       - ready_for_review
 
+permissions: {}
+
 jobs:
   shell_check:
     name: "Shell: Syntax checks"