diff --git a/.github/workflows/sep-source.yml b/.github/workflows/sep-source.yml
index 8cae0dcf9d679..2d7bb0368164c 100644
--- a/.github/workflows/sep-source.yml
+++ b/.github/workflows/sep-source.yml
@@ -12,6 +12,13 @@ on:
       - 'tools/aurora-sep/**'
       - '.github/workflows/sep-source.yml'
 
+permissions:
+  contents: read
+
+concurrency:
+  group: sep-source-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   source:
     runs-on: ubuntu-latest