diff --git a/.github/workflows/semantic_pr.yaml b/.github/workflows/semantic_pr.yaml
index 1c9634989e..0828b7f2e3 100644
--- a/.github/workflows/semantic_pr.yaml
+++ b/.github/workflows/semantic_pr.yaml
@@ -11,6 +11,8 @@ defaults:
 jobs:
   validate:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read # Needed for checking out the repository
     steps:
       - name: Validate Pull Request
         uses: amannn/action-semantic-pull-request@v5.2.0