diff --git a/.github/workflows/issue-monster.lock.yml b/.github/workflows/issue-monster.lock.yml
index 03a33d44..ea17eefc 100644
--- a/.github/workflows/issue-monster.lock.yml
+++ b/.github/workflows/issue-monster.lock.yml
@@ -78,9 +78,10 @@ jobs:
       - search_issues
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      issues: read
-      pull-requests: read
+      actions: write
+      contents: write
+      issues: write
+      pull-requests: write
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -768,7 +769,8 @@ jobs:
     if: (always()) && (needs.agent.result != 'skipped')
     runs-on: ubuntu-slim
     permissions:
-      contents: read
+      actions: write
+      contents: write
       discussions: write
       issues: write
       pull-requests: write
@@ -1024,7 +1026,8 @@ jobs:
     if: ((!cancelled()) && (needs.agent.result != 'skipped')) && (needs.detection.outputs.success == 'true')
     runs-on: ubuntu-slim
     permissions:
-      contents: read
+      actions: write
+      contents: write
       discussions: write
       issues: write
       pull-requests: write
diff --git a/.github/workflows/issue-monster.md b/.github/workflows/issue-monster.md
index 4c8b5b06..ad1c6600 100644
--- a/.github/workflows/issue-monster.md
+++ b/.github/workflows/issue-monster.md
@@ -12,9 +12,10 @@ on:
   skip-if-no-match: "is:issue is:open"
 
 permissions:
-  contents: read
-  issues: read
-  pull-requests: read
+  actions: write
+  contents: write
+  issues: write
+  pull-requests: write
 
 engine: copilot
 timeout-minutes: 30