diff --git a/.github/workflows/test-report.yml b/.github/workflows/test-report.yml
index 2e4a2e8..c23bb4c 100644
--- a/.github/workflows/test-report.yml
+++ b/.github/workflows/test-report.yml
@@ -4,6 +4,10 @@ on:
     workflows: [".NET"] # runs after .NET workflow
     types:
       - completed
+permissions:
+  contents: read
+  actions: read
+  checks: write
 jobs:
   report:
     runs-on: ubuntu-latest