diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 9c6fddbfc18..4f68e8d9851 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -16,6 +16,10 @@ on:
       - "**"
       - "!docs/**"
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   deploy:
     name: Build & Deploy