diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 0107577..287148a 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -11,6 +11,10 @@ on:
     branches:
       - "main"
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   golangci:
     runs-on: ubuntu-latest
@@ -26,6 +30,7 @@ jobs:
         uses: golangci/golangci-lint-action@v3
         with:
           version: latest
+          only-new-issues: true
   docker:
     runs-on: ubuntu-latest
     needs: [ golangci ]