diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 11c78b5c..d44f6eb3 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -7,9 +7,9 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 
-  permissions:
-    pull-requests: read
   jobs:
+    permissions:
+      pull-requests: read
     build:
       name: Build and Analysis
       runs-on: ubuntu-latest