diff --git a/.github/workflows/azure-static-web-apps-ashy-river-0debb7803.yml b/.github/workflows/azure-static-web-apps-ashy-river-0debb7803.yml
index fa0d9af8..9880796c 100644
--- a/.github/workflows/azure-static-web-apps-ashy-river-0debb7803.yml
+++ b/.github/workflows/azure-static-web-apps-ashy-river-0debb7803.yml
@@ -1,5 +1,5 @@
 name: Azure Static Web Apps CI/CD
-
+ 
 on:
   push:
     branches:
@@ -11,10 +11,14 @@ on:
 
 jobs:
   build_and_deploy_job:
-    permissions:
-      actions: write
-      checks: none
     if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.action != 'closed')
+    permissions:
+      actions: read 
+      checks: write
+      contents: read
+      deployments: read
+      pull-requests: write
+      security-events: write
     runs-on: ubuntu-latest
     name: Build and Deploy Job
     steps: