diff --git a/.github/workflows/jira_comment.yml b/.github/workflows/jira_comment.yml
index 32a8b8a..6c9760d 100644
--- a/.github/workflows/jira_comment.yml
+++ b/.github/workflows/jira_comment.yml
@@ -5,6 +5,8 @@ on:
 
 jobs:
   jira_comment:
+    permissions:
+      pull-requests: read
     if: github.event.pull_request.merged == true
     uses: namely/sre/.github/workflows/reusable-workflow-jira-comment.yml@main
     secrets: