diff --git a/.github/workflows/PR.yml b/.github/workflows/PR.yml
index 9fd887c..edc5b33 100644
--- a/.github/workflows/PR.yml
+++ b/.github/workflows/PR.yml
@@ -1,7 +1,7 @@
 ---
 name: Run Gradle on PRs
 on: pull_request
-
+permissions: read-all
 jobs:
   gradle:
     runs-on: macos-latest