diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 057f931e..166d7dfa 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -4,6 +4,11 @@ on:
     # Executed on the 1st day of each month
     - cron: "0 0 1 * *"
 
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+
 jobs:
   stale:
     runs-on: ubuntu-latest