diff --git a/.github/workflows/Build ThunderOnWindows.yml b/.github/workflows/Build ThunderOnWindows.yml
index 7228d32..b542afb 100644
--- a/.github/workflows/Build ThunderOnWindows.yml	
+++ b/.github/workflows/Build ThunderOnWindows.yml	
@@ -1,5 +1,12 @@
 name: Build ThunderOnWindows
 
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.ref != 'refs/heads/master' }}
+
 on:
   workflow_dispatch:
   push: