diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index e1b6a878e..e769967ec 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -5,6 +5,8 @@ on:
     paths-ignore:
       - 'docs/**'
 
+permissions: read-all
+
 jobs:
   server_tests:
     strategy: