diff --git a/.github/workflows/java-checkstyle.yml b/.github/workflows/java-checkstyle.yml
index 896033773a3..ee79d1fcf94 100644
--- a/.github/workflows/java-checkstyle.yml
+++ b/.github/workflows/java-checkstyle.yml
@@ -19,6 +19,9 @@ on:
       - main
       - '0.[0-9]+.[0-9]+'
 
+permissions:
+  contents: read
+
 concurrency: 
   group: java-checkstyle-${{ github.head_ref }}
   cancel-in-progress: true
@@ -47,6 +50,8 @@ jobs:
           git diff-files --quiet
 
       - name: Create a comment in the PR with the instructions
+        permissions:
+          pull-requests: write
         if: steps.git.outcome != 'success'
         uses: peter-evans/create-or-update-comment@v1
         with: