diff --git a/.github/workflows/publish_charm.yaml b/.github/workflows/publish_charm.yaml
index a84cba1f..25f8a5bb 100644
--- a/.github/workflows/publish_charm.yaml
+++ b/.github/workflows/publish_charm.yaml
@@ -10,3 +10,6 @@ jobs:
   publish-to-edge:
     uses: canonical/operator-workflows/.github/workflows/publish_charm.yaml@main
     secrets: inherit
+    permissions:
+      contents: write
+      pull-requests: write