diff --git a/.github/workflows/pull_request_packages_deploy.yml b/.github/workflows/pull_request_packages_deploy.yml
index a84e84749a..6def11abc5 100644
--- a/.github/workflows/pull_request_packages_deploy.yml
+++ b/.github/workflows/pull_request_packages_deploy.yml
@@ -29,6 +29,8 @@ jobs:
     permissions:
       id-token: write
       code-quality: write
+      contents: read
+      pull-requests: read
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2