diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 858a43c9..3a65ac08 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,6 +11,12 @@ on:
       - "**.md"
       - "!.github/workflows/*.yml"
 
+# Explicit permissions to allow CI to run on fork PRs
+# See: https://github.com/logos-blockchain/logos-execution-zone/issues/278
+permissions:
+  contents: read
+  pull-requests: read
+
 name: General
 
 jobs: