diff --git a/.github/workflows/build-report.yml b/.github/workflows/build-report.yml
index 691236c..9c2f338 100644
--- a/.github/workflows/build-report.yml
+++ b/.github/workflows/build-report.yml
@@ -21,6 +21,11 @@ on:
     types:
     - completed
 
+permissions:
+  actions: read    # Allows reading workflow run information
+  statuses: write  # Required if the action updates commit statuses
+  checks: write    # Required if it updates GitHub Checks API
+
 jobs:
   build:
     runs-on: ubuntu-latest