diff --git a/.github/workflows/semantic.yml b/.github/workflows/semantic.yml
index b253c25f..3b57c94d 100644
--- a/.github/workflows/semantic.yml
+++ b/.github/workflows/semantic.yml
@@ -3,6 +3,8 @@ name: "Semantic Pull Request"
 on:
   pull_request:
     types: ['opened', 'edited', 'reopened', 'synchronize']
+permissions:
+  contents: read
 jobs:
   main:
     name: Validate PR and Commits