1 files changed, 17 insertions, 1 deletions
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index 7e03f5de73..d2d2edd5bb 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -5,6 +5,18 @@ on:
   schedule:
   - cron: "0 2 * * 6"
 
+permissions:
+  actions: read
+  checks: none
+  contents: write
+  deployments: none
+  issues: read
+  packages: none
+  pull-requests: write
+  repository-projects: none
+  security-events: none
+  statuses: none
+
 jobs:
   build:
 
@@ -22,10 +34,14 @@ jobs:
 
 
     steps:
-    - uses: shivammathur/setup-php@v2
+    - uses: shivammathur/setup-php@36cb9fb0fccf887130d6c5a3d40a3b3479310026
+      permissions:
+        contents: none
       with:
         php-version: '7.3'
     - uses: actions/checkout@v2
+      permissions:
+        contents: read
       with:
         ref: '4.x-dev'
         lfs: false