diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 92649e06b13..3ba577ac2eb 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,5 +1,5 @@
 name: Publish
-permissions: read-all
+permissions: {}
 
 on:
   push:
@@ -8,9 +8,9 @@ on:
 
 jobs:
   build:
-
     runs-on: ubuntu-latest
-
+    permissions:
+      pull-requests: write
     steps:
     - uses: actions/checkout@v3
     - name: Build Online Document