diff --git a/sample/workflows/closed.yml b/sample/workflows/closed.yml
index 1577bfe9..65727d1e 100644
--- a/sample/workflows/closed.yml
+++ b/sample/workflows/closed.yml
@@ -28,6 +28,10 @@ jobs:
     name: "Comment rebase --onto on Sub PRs"
     runs-on: ubuntu-slim
     timeout-minutes: 2
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: write
     steps:
       - uses: mobsuccess-devops/github-actions-mobsuccess@master
         with: