diff --git a/.github/workflows/super-linter.yml b/.github/workflows/super-linter.yml
index c38c150fa..ad756d892 100644
--- a/.github/workflows/super-linter.yml
+++ b/.github/workflows/super-linter.yml
@@ -3,8 +3,15 @@ name: Super Linter
 on:
   workflow_dispatch:
 
+permissions:
+  contents: read  #  to fetch code (actions/checkout)
+
 jobs:
   build:
+    permissions:
+      contents: read  #  to fetch code (actions/checkout)
+      statuses: write  #  to mark status of each linter run (github/super-linter/slim)
+
     name: Lint Code Base
     runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}