diff --git a/.github/workflows/pr-size-labeler.yml b/.github/workflows/pr-size-labeler.yml
index 294411a30d..0232cc4007 100644
--- a/.github/workflows/pr-size-labeler.yml
+++ b/.github/workflows/pr-size-labeler.yml
@@ -6,6 +6,9 @@ on:
 jobs:
 
   size-label:
+    permissions:
+      contents: read  # to determine modified files
+      pull-requests: write  # to add labels to PRs
     runs-on: ubuntu-latest
     steps:
       - name: size-label