diff --git a/.github/workflows/call-license-check.yml b/.github/workflows/call-license-check.yml
index 4fc084f..49bc607 100644
--- a/.github/workflows/call-license-check.yml
+++ b/.github/workflows/call-license-check.yml
@@ -1,5 +1,11 @@
 name: Call License and README Check
-on: pull_request
+on:
+  pull_request_target:
+    types: [opened, synchronize]
+
+permissions:
+  pull-requests: write
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-pull/${{ github.event.number }}