diff --git a/.github/workflows/issues.yml b/.github/workflows/issues.yml
index 3ece3113..4fb9be3a 100644
--- a/.github/workflows/issues.yml
+++ b/.github/workflows/issues.yml
@@ -3,6 +3,9 @@ on:
   schedule:
     - cron: '00 20 * * *'
 
+permissions:
+  contents: read
+  pull-requests: write
 jobs:
   stale:
     name: Flag and close stale issues