diff --git a/.gitea/workflows/run-hcdc.yaml b/.gitea/workflows/run-hcdc.yaml
index fe2318dbd..5783e67c0 100644
--- a/.gitea/workflows/run-hcdc.yaml
+++ b/.gitea/workflows/run-hcdc.yaml
@@ -1,9 +1,13 @@
 name: Run HCDC
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, reopened, synchronize, edited]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   run-hcdc:
     runs-on: ubuntu-latest