diff --git a/.github/workflows/ci-changelog.yml b/.github/workflows/ci-changelog.yml
index d1893536..b275f705 100644
--- a/.github/workflows/ci-changelog.yml
+++ b/.github/workflows/ci-changelog.yml
@@ -32,19 +32,8 @@ jobs:
         shell: bash -l {0}
 
     permissions:
-      actions: read
-      attestations: none
-      checks: read
       contents: read
-      deployments: read
-      id-token: none
-      issues: read
-      packages: none
-      pages: none
-      pull-requests: read
-      repository-projects: none
-      security-events: none
-      statuses: none
+      pull-requests: write
 
     if: github.actor != 'pre-commit-ci[bot]'
     steps: