diff --git a/.github/workflows/issue-opened.yml b/.github/workflows/issue-opened.yml
index d6f9397dc4c..c75fe2e4524 100644
--- a/.github/workflows/issue-opened.yml
+++ b/.github/workflows/issue-opened.yml
@@ -4,6 +4,11 @@ on:
     types: [opened]
 concurrency:
   group: issue-opened-${{ github.event.issue.number }}
+
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   main:
     runs-on: ubuntu-latest