diff --git a/.github/sync.yml b/.github/sync.yml
index a984229..92a181e 100644
--- a/.github/sync.yml
+++ b/.github/sync.yml
@@ -90,8 +90,6 @@ RedHatInsights/insights-on-prem:
     dest: .github/workflows/linters.yaml
   - source: workflows_examples/bots-auto-merge.yaml
     dest: .github/workflows/bots-auto-merge.yaml
-  - source: workflows_examples/pytests.yaml
-    dest: .github/workflows/pytests.yaml
 
 RedHatInsights/insights-operator-gathering-conditions:
   - CODEOWNERS
diff --git a/workflows_examples/pytests.yaml b/workflows_examples/pytests.yaml
index 47a04ea..4a1ca24 100644
--- a/workflows_examples/pytests.yaml
+++ b/workflows_examples/pytests.yaml
@@ -5,6 +5,9 @@ on:
   push:
     branches: [main, master]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     strategy: