diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index bc8ddb8..a6abd72 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -5,6 +5,17 @@ on:
     branches:
       - main  # 监听 main 分支的 push 事件
 
+# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+# Allow one concurrent deployment
+concurrency:
+  group: "pages"
+  cancel-in-progress: true
+
 jobs:
   # Build job
   build: