diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 952263f..d726f39 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -2,9 +2,12 @@ name: 'Close stale issues'
 on:
   schedule:
     - cron: '30 1 * * *'
-permissions:
-  issues: write
+permissions: {}
 
 jobs:
   stale:
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
     uses: cpp-linter/.github/.github/workflows/stale.yml@main