diff --git a/.github/workflows/detect-agent.yml b/.github/workflows/detect-agent.yml
index f53e2855..0d8c17b4 100644
--- a/.github/workflows/detect-agent.yml
+++ b/.github/workflows/detect-agent.yml
@@ -5,6 +5,10 @@ on:
     types: [opened]
   workflow_dispatch: {}
 
+permissions:
+  issues: write
+  pull-requests: write
+
 jobs:
   detect:
     if: github.event_name != 'workflow_dispatch'