diff --git a/.github/workflows/update_references.yml b/.github/workflows/update_references.yml
index 7af3326ae57..ed5aad11bba 100644
--- a/.github/workflows/update_references.yml
+++ b/.github/workflows/update_references.yml
@@ -5,6 +5,9 @@ on:
   repository_dispatch:
     types: [update-references]
   workflow_dispatch:
+permissions:
+  contents: write
+  pull-requests: write
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}