diff --git a/.github/workflows/stale_issues.yml b/.github/workflows/stale_issues.yml
index 3be226bbe..6903b401f 100644
--- a/.github/workflows/stale_issues.yml
+++ b/.github/workflows/stale_issues.yml
@@ -1,4 +1,8 @@
 name: "Mark or close stale issues and PRs"
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
  
 on:
   schedule: