diff --git a/README.md b/README.md
index c612768..5ceeaec 100644
--- a/README.md
+++ b/README.md
@@ -44,8 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: read
-      pull-requests: write
-      id-token: write
+      pull-requests: read
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@128a63446a954579617e875aaab7d2978154e969 # v2.4.0