diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 89581c9a178f..12dbd9e8468a 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -22,6 +22,11 @@ name: Integration tests
 env:
   IMAGE_NAME: scorecard
   OUTPUT_PATH: output
+
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   integration-trusted:
     runs-on: ubuntu-latest