diff --git a/.gitea/workflows/test-workflow.yml b/.gitea/workflows/test-workflow.yml
index 48387e6..0ccae95 100644
--- a/.gitea/workflows/test-workflow.yml
+++ b/.gitea/workflows/test-workflow.yml
@@ -11,6 +11,11 @@ on:
       MAVEN_SECRET:
         required: true
 
+permissions:
+  contents: read
+  actions: read
+  checks: write
+
 jobs:
   test:
     name: Test