diff --git a/.github/workflows/cleanup-checks.yml b/.github/workflows/cleanup-checks.yml
index 132f64ab792..7f91d6ce1db 100644
--- a/.github/workflows/cleanup-checks.yml
+++ b/.github/workflows/cleanup-checks.yml
@@ -13,6 +13,8 @@ jobs:
       github.event.review.state == 'APPROVED' &&
       contains(github.event.pull_request.labels.*.name, 'auto-cleanup') == false
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: Checkout repo
         uses: actions/checkout@v4