diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ef5cc121..f6287a41 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -8,6 +8,9 @@ on:
   pull_request:
     types: [opened, synchronize, reopened]
 
+permissions:
+  pull-requests: read
+
 jobs:
   build:
     name: Build
diff --git a/README.md b/README.md
index 416ac34c..b261bcfc 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# Baywatch
+# Baywatch [![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=Marthym_baywatch&metric=sqale_rating)](https://sonarcloud.io/summary/new_code?id=Marthym_baywatch) [![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=Marthym_baywatch&metric=security_rating)](https://sonarcloud.io/summary/new_code?id=Marthym_baywatch) [![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=Marthym_baywatch&metric=reliability_rating)](https://sonarcloud.io/summary/new_code?id=Marthym_baywatch)
 
 <img src="./seaside/public/favicon.ico" alt="Size Limit CLI" align="right" style="float: right; margin: auto; width: 100px">