diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 954ebf3..9f60cec 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -91,6 +91,9 @@ jobs:
     name: Common Checks
     needs: setup-maven-settings
     runs-on: [ k8s ]
+    permissions:
+      checks: write
+      contents: read
 
     container:
       image: one.hitachivantara.com/devops-docker-release/pentaho/actions-common:20240305.137