diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index fd212e9..edb5399 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -1,4 +1,8 @@
 name: 'Close stale issues and PRs'
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
 on:
   schedule:
     - cron: '0 0 1 */6 *'