diff --git a/.github/workflows/sync-labels.yaml b/.github/workflows/sync-labels.yaml
index 595d28b..e65af5a 100644
--- a/.github/workflows/sync-labels.yaml
+++ b/.github/workflows/sync-labels.yaml
@@ -8,6 +8,10 @@ on:
             - .github/labels.yml
     workflow_dispatch:
 
+permissions:
+    issues: write
+    contents: read
+
 jobs:
     sync:
         name: Sync labels