diff --git a/.github/workflows/module-manage-github.yaml b/.github/workflows/module-manage-github.yaml
index 1610b36..97ab6c7 100644
--- a/.github/workflows/module-manage-github.yaml
+++ b/.github/workflows/module-manage-github.yaml
@@ -15,4 +15,7 @@ on:
 jobs:
   module-manage-github:
     uses: cloudeteer/terraform-governance/.github/workflows/module-github.yaml@main
+    permissions:
+      contents: write
+      pull-requests: read
     secrets: inherit