diff --git a/.github/workflows/post-dependabot.yml b/.github/workflows/post-dependabot.yml
index aa9e8d78..3093c306 100644
--- a/.github/workflows/post-dependabot.yml
+++ b/.github/workflows/post-dependabot.yml
@@ -3,6 +3,10 @@
 name: "Post Dependabot Actions"
 on: pull_request
 
+# https://docs.github.com/en/rest/overview/permissions-required-for-github-apps
+permissions:
+  contents: write
+
 jobs:
   Install:
     runs-on: ubuntu-latest
diff --git a/lib/content/post-dependabot.yml b/lib/content/post-dependabot.yml
index aa9e8d78..3093c306 100644
--- a/lib/content/post-dependabot.yml
+++ b/lib/content/post-dependabot.yml
@@ -3,6 +3,10 @@
 name: "Post Dependabot Actions"
 on: pull_request
 
+# https://docs.github.com/en/rest/overview/permissions-required-for-github-apps
+permissions:
+  contents: write
+
 jobs:
   Install:
     runs-on: ubuntu-latest