diff --git a/.github/workflows/pr-automation.yml b/.github/workflows/pr-automation.yml
index 41d3f8d5e0f5..4da1eb419453 100644
--- a/.github/workflows/pr-automation.yml
+++ b/.github/workflows/pr-automation.yml
@@ -43,6 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
+      contents: read
     defaults:
       run:
         shell: bash