diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
index 8e0416b..51a7d93 100644
--- a/.github/workflows/gitleaks.yml
+++ b/.github/workflows/gitleaks.yml
@@ -4,6 +4,11 @@ on:
     push:
       branches:
         - 'main'
+  
+permissions: 
+  contents: read # This is required for actions/checkout
+  pull-requests: write # This is required for pull request comments
+
 jobs:
   scan:
     name: gitleaks