diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index e9762fe..0f2186b 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -3,6 +3,9 @@ on:
   pull_request:
     types: [opened, synchronize]
 
+permissions:
+  contents: read
+
 jobs:
   build_test:
     runs-on: ubuntu-latest
@@ -14,7 +17,10 @@ jobs:
         uses: actions/setup-go@v4
         with:
           go-version: 1.20
-
+      - name: Lint
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: v1.54
       - name: Build and test
         run: |
           go build -v