diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 0548e3e..27afba6 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,9 +1,25 @@
 name: Build on PR
 
 on:
-  pull_request:
+  pull_request_target:
     branches: ["main"]
 
+permissions:
+  actions : read
+  attestations : read
+  checks : read
+  contents : read
+  deployments : read
+  id-token : read
+  issues : read
+  metadata : read
+  packages : read
+  pages : read
+  pull-requests : read
+  repository-projects : read
+  security-events : read
+  statuses : read
+
 jobs:
   build:
     name: Build on Java ${{ matrix.java }}