diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 32ba10adf27..88a9fe8e06d 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -19,8 +19,14 @@ name: Lint Code Base
 
 on: [pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   build:
+    permissions:
+      contents: read  # for actions/checkout to fetch code
+      statuses: write  # for github/super-linter to mark status of each linter run
     name: SuperLinter Check
     runs-on: ubuntu-latest
     steps: