diff --git a/.github/workflows/_check.yaml b/.github/workflows/_check.yaml
index 1cef7fe42..05111df30 100644
--- a/.github/workflows/_check.yaml
+++ b/.github/workflows/_check.yaml
@@ -8,11 +8,13 @@ on:
         required: false
         default: 3.0.6
 
-permissions: write-all
-
 jobs:
   rubocop:
     name: Rubocop
+    permissions:
+      actions: write
+      contents: read
+      id-token: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo