diff --git a/.github/workflows/ai-flag-cleanup.yml b/.github/workflows/ai-flag-cleanup.yml
index c35ade3a1c..f5f45e0a04 100644
--- a/.github/workflows/ai-flag-cleanup.yml
+++ b/.github/workflows/ai-flag-cleanup.yml
@@ -5,6 +5,8 @@ on:
 
 permissions:
   pull-requests: write
+  contents: write
+  issues: read
 
 jobs:
   flag-cleanup: