diff --git a/.github/workflows/compatibility.yml b/.github/workflows/compatibility.yml
index 07f292b..a9b690e 100644
--- a/.github/workflows/compatibility.yml
+++ b/.github/workflows/compatibility.yml
@@ -81,6 +81,10 @@ jobs:
     needs: compatibility-test
     if: always()
 
+    permissions:
+      contents: read
+      pull-requests: write
+
     steps:
     - uses: actions/checkout@v4