diff --git a/.github/workflows/expire.yml b/.github/workflows/expire.yml
index 8e5633b..2c07a45 100644
--- a/.github/workflows/expire.yml
+++ b/.github/workflows/expire.yml
@@ -58,6 +58,7 @@ on:
 
 permissions:
   pull-requests: 'write'
+  contents: 'read'
 
 jobs:
   expire: