diff --git a/.github/workflows/copilot-collections-update.yaml b/.github/workflows/copilot-collections-update.yaml
index 17287b354b..4dfd90c58d 100644
--- a/.github/workflows/copilot-collections-update.yaml
+++ b/.github/workflows/copilot-collections-update.yaml
@@ -4,6 +4,10 @@ on:
     - cron: "0 9 * * 1" # Run every Monday at 09:00 UTC
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   check-update:
     # Pinned to @main to get the latest logic, but the content version is controlled by .github/copilot-collections.yaml