diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7d2097a1a..e672cb16c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,9 +8,6 @@ on:
   push:
     branches: [main]
 
-permissions:
-  checks: write
-
 jobs:
   build:
     name: 🏗️ Build
@@ -35,6 +32,10 @@ jobs:
     name: 🔬 Test
     runs-on: ubuntu-latest
     timeout-minutes: 30
+    permissions:
+      checks: write
+      pull-requests: write
+      contents: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4