diff --git a/.github/workflows/release-submodules.yaml b/.github/workflows/release-submodules.yaml
index 12e6b5897..5047a7e0d 100644
--- a/.github/workflows/release-submodules.yaml
+++ b/.github/workflows/release-submodules.yaml
@@ -1,4 +1,7 @@
 on: workflow_dispatch
+permissions:
+  contents: write
+  pull-requests: write
 name: release-please-submodule
 jobs:
   changeFinder: