diff --git a/.github/workflows/autopr.yaml b/.github/workflows/autopr.yaml
index d3c0fba..6c6b187 100644
--- a/.github/workflows/autopr.yaml
+++ b/.github/workflows/autopr.yaml
@@ -5,9 +5,13 @@ on:
     branches:
       - 'autopr/**'
 
+permissions: read-all  
+
 jobs:
   create-pull-request:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: Create PR
         uses: actions/github-script@v6