diff --git a/.github/workflows/stubs.yml b/.github/workflows/stubs.yml
index 65897a2c..384c4992 100644
--- a/.github/workflows/stubs.yml
+++ b/.github/workflows/stubs.yml
@@ -23,6 +23,8 @@ jobs:
       # Give the default GITHUB_TOKEN write permission to commit and push the
       # changed files back to the repository.
       contents: write
+      # For the person access token (PAT) to push back changes.
+      secrets: read
 
     steps:
     - uses: actions/checkout@v3