diff --git a/.github/workflows/check-runtime-migration.yml b/.github/workflows/check-runtime-migration.yml
index 9866ae18b98ac7dac962ec823873988c6e1cffad..e935f1cb44981e07f06cfeb74811fec29e9f41a3 100644
--- a/.github/workflows/check-runtime-migration.yml
+++ b/.github/workflows/check-runtime-migration.yml
@@ -16,6 +16,8 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   preflight:
     uses: ./.github/workflows/reusable-preflight.yml