diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index b90095a..cf2790c 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -1,5 +1,9 @@
 name: Pytest
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on: [push, pull_request]
 
 jobs:
@@ -13,15 +17,18 @@ jobs:
       uses: actions/setup-python@v5
       with:
         python-version: '3.10'
+
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
         pip install -r requirements.txt
         pip install -r dev-requirements.txt
+
     - name: Test with pytest
       run: |
         set -o pipefail
         python -m pytest --junitxml=pytest.xml --cov-report=term-missing --cov=src tests/ | tee pytest-coverage.txt
+
     - name: Pytest coverage comment
       uses: MishaKav/pytest-coverage-comment@v1.1.47
       with: