diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index cd371c0c..f66dd94e 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -11,10 +11,17 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
 
   update_release_draft:
 
+    permissions:
+      contents: write
+      pull-requests: write
+
     name: Update release draft
     runs-on: ubuntu-latest