diff --git a/.github/workflows/publish-preview.yml b/.github/workflows/publish-preview.yml
index c404f8f..bd7c709 100644
--- a/.github/workflows/publish-preview.yml
+++ b/.github/workflows/publish-preview.yml
@@ -9,6 +9,8 @@ jobs:
     name: Determine whether this issue comment was on a pull request from a fork
     if: ${{ github.event.issue.pull_request && startsWith(github.event.comment.body, '@metamaskbot publish-preview') }}
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
     outputs:
       IS_FORK: ${{ steps.is-fork.outputs.IS_FORK }}
     steps: