diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 0423cb2..ccd9d49 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -1,6 +1,14 @@
 name: WaSAbi
 
-on: [push]
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+  pull-requests: read
 
 jobs:
   tests: