diff --git a/.github/workflows/lint-php.yml b/.github/workflows/lint-php.yml
index d8694efd..62476c90 100644
--- a/.github/workflows/lint-php.yml
+++ b/.github/workflows/lint-php.yml
@@ -13,6 +13,13 @@ on:
       - master
       - stable*
 
+permissions:
+  contents: read
+
+concurrency: 
+  group: lint-php-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   php-lint:
     runs-on: ubuntu-latest
@@ -36,6 +43,8 @@ jobs:
         run: composer run lint
 
   summary:
+    permissions:
+      contents: none
     runs-on: ubuntu-latest
     needs: php-lint