From 373ebe2df7c83c8d1aa2ba89ca4dbcadeac38e57 Mon Sep 17 00:00:00 2001
From: Frank Elsinga <frank@elsinga.de>
Date: Fri, 2 Jan 2026 02:41:05 +0100
Subject: [PATCH] Update prevent-file-change.yml

---
 .github/workflows/prevent-file-change.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/prevent-file-change.yml b/.github/workflows/prevent-file-change.yml
index 21e6cc16b..fcb47a659 100644
--- a/.github/workflows/prevent-file-change.yml
+++ b/.github/workflows/prevent-file-change.yml
@@ -1,11 +1,14 @@
 name: prevent-file-change
 
 on:
-  pull_request:
+  pull_request_target:
+permissions: {}
 
 jobs:
   check-file-changes:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: read
     steps:
       - name: Prevent file change
         uses: xalvarez/prevent-file-change-action@8ba6c9f0f3c6c73caea35ae4b13988047f9cd104 # v3.0.0