diff --git a/.github/workflows/pr-reply.yml b/.github/workflows/pr-reply.yml
index 553774bf3..48752e641 100644
--- a/.github/workflows/pr-reply.yml
+++ b/.github/workflows/pr-reply.yml
@@ -8,6 +8,12 @@ name: Reply to PRs
 on:
   pull_request:
     types: [opened, reopened]
+
+permissions:
+    issues: write
+    pull-requests: write
+    contents: read
+
 jobs:
     reply:
         runs-on: ubuntu-latest