diff --git a/.github/workflows/pulumi.yml b/.github/workflows/pulumi.yml
index c4f64168..e8ac05b5 100644
--- a/.github/workflows/pulumi.yml
+++ b/.github/workflows/pulumi.yml
@@ -8,6 +8,9 @@ jobs:
     public_stack:
         name: Update public stack
         runs-on: ubuntu-latest
+        permissions:
+            contents: write
+            pull-requests: write
         steps:
             - uses: actions/checkout@v4
               with: