diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index b86e1f9..11a7ed9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,4 +1,7 @@
 name: Build
+permissions:
+  contents: read
+  pull-requests: read
 on:
   push:
     branches:
@@ -15,8 +18,9 @@ jobs:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Check SONAR_TOKEN
         run: echo "SONAR_TOKEN length is ${#SONAR_TOKEN}"
-        env:
+        with:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          export_environment_variables: true
       - name: Install dependencies
         run: yarn
       - name: Test and coverage