diff --git a/.github/workflows/dependabot-repair.yml b/.github/workflows/dependabot-repair.yml
index bf9ad9c2f07..2a10720bbb8 100644
--- a/.github/workflows/dependabot-repair.yml
+++ b/.github/workflows/dependabot-repair.yml
@@ -7,5 +7,11 @@ on:
 jobs:
   dependabot-repair:
     if: github.actor == 'dependabot[bot]'
+    permissions:
+      actions: read
+      contents: write
+      discussions: write
+      issues: write
+      pull-requests: write
     uses: githubnext/dependabot-campaign/.github/workflows/dependabot-repair-reusable.lock.yml@ff91842c074b23270d3a0e26a7206a251232a374 # v0.2.0
     secrets: inherit
\ No newline at end of file