diff --git a/.github/workflows/theme-prs-closer.yml b/.github/workflows/theme-prs-closer.yml
index 5cff4d14..13ca8488 100644
--- a/.github/workflows/theme-prs-closer.yml
+++ b/.github/workflows/theme-prs-closer.yml
@@ -5,6 +5,20 @@ on:
     types:
       - labeled
 
+permissions:
+  actions: read
+  checks: read
+  contents: read
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: write
+  repository-projects: read
+  security-events: read
+  statuses: read
+
 jobs:
   close-prs:
     runs-on: ubuntu-latest