diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 86c18c96..1cad5448 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -5,10 +5,13 @@ on:
     branches:
       - master
       - next
-  pull_request:
+  pull_request_target:
     types: [opened, reopened]
 
-permissions: read-all
+# needs write to add annotations
+permissions:
+  checks: write
+  contents: write
 
 jobs:
   linting: