diff --git a/.github/workflows/patch-release-version-bump.yml b/.github/workflows/patch-release-version-bump.yml
index 7625e7b4f27e6..030aafc28548e 100644
--- a/.github/workflows/patch-release-version-bump.yml
+++ b/.github/workflows/patch-release-version-bump.yml
@@ -15,9 +15,14 @@ on:
         description: 'Patch version (new)'
         options: ['1', '2', '3', '4', '5', '6', '7', '8', '9', '10', '11', '12', '13', '14', '15', '16', '17', '18', '19', '20', '21', '22', '23', '24', '25']
 
+permissions: {}
+
 jobs:
   create-pull-request:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: Check out repository code
         uses: actions/checkout@v4