diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ecc95ee..7cd4adf 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -43,6 +43,11 @@ jobs:
   test-sff:
     runs-on: windows-latest
     needs: build
+    permissions:
+      contents: read
+      issues: read
+      checks: write
+      pull-requests: write
     steps:
     - name: use cache 
       uses: actions/cache@v2