diff --git a/.github/workflows/stale_issues.yml b/.github/workflows/stale_issues.yml
index 60b8929e2b2c..de39d9fa08e6 100644
--- a/.github/workflows/stale_issues.yml
+++ b/.github/workflows/stale_issues.yml
@@ -7,6 +7,10 @@ on:
 
 jobs:
   cleanup:
+    permissions:
+      issues: write
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     name: Stale issue job
     steps: