diff --git a/.github/workflows/auto-assign-pr.yml b/.github/workflows/auto-assign-pr.yml
index c3b5483..b923fd6 100644
--- a/.github/workflows/auto-assign-pr.yml
+++ b/.github/workflows/auto-assign-pr.yml
@@ -7,8 +7,13 @@ on:
   pull_request:
     types: [opened]
 
+permissions:
+  contents: read
+
 jobs:
   assignAuthor:
+    permissions:
+      issues: write  # for samspills/assign-pr-to-author
     runs-on: ubuntu-latest
     steps: