diff --git a/.github/workflows/pushtorally.yml b/.github/workflows/pushtorally.yml
index ac26dc2..c722c66 100644
--- a/.github/workflows/pushtorally.yml
+++ b/.github/workflows/pushtorally.yml
@@ -2,9 +2,10 @@ name: build documentation and publish
 
 on:
   push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
+    branches:
+      - main
+permissions:
+  contents: write
 
 jobs:
   build: