diff --git a/.github/workflows/pull_request.yaml b/.github/workflows/pull_request.yaml
index d712b8c..b8bed1b 100644
--- a/.github/workflows/pull_request.yaml
+++ b/.github/workflows/pull_request.yaml
@@ -3,6 +3,10 @@ name: Pull Request
 on:
   pull_request:
 
+permissions:
+  id-token: write
+  contents: read
+
 jobs:
   changes:
     uses: ./.github/workflows/changes.yaml