diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 90f7a1bc7b..d9f71c6f78 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -47,6 +47,7 @@ on:
     - cron: '20 16 * * *' # Run every day at 16:20 UTC / 8:20 PST
 
 permissions:
+  contents: read
   issues: write
 
 jobs: