diff --git a/.github/workflows/triage-incoming.yml b/.github/workflows/triage-incoming.yml
index 1d291a319b..51f7003663 100644
--- a/.github/workflows/triage-incoming.yml
+++ b/.github/workflows/triage-incoming.yml
@@ -4,6 +4,10 @@ on:
   issues:
     types: [ opened ]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   triage:
     uses: matrix-org/backend-meta/.github/workflows/triage-incoming.yml@18beaf3c8e536108bd04d18e6c3dc40ba3931e28 # v2.0.3