diff --git a/.github/workflows/pr-nightly.yml b/.github/workflows/pr-nightly.yml
index 79a6caa..5dc9c11 100644
--- a/.github/workflows/pr-nightly.yml
+++ b/.github/workflows/pr-nightly.yml
@@ -17,4 +17,7 @@ concurrency:
 jobs:
   nightly:
     if: ${{ github.event.label.name == 'test-nightly' }}
+    permissions:
+      contents: read
+      issues: write
     uses: ./.github/workflows/nightly.yml