diff --git a/.github/workflows/label-closed.yml b/.github/workflows/label-closed.yml
index aa08e4fc..3cb42786 100644
--- a/.github/workflows/label-closed.yml
+++ b/.github/workflows/label-closed.yml
@@ -12,8 +12,14 @@ jobs:
   run:
     name: "Label"
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+
     steps:
       - name: Update Labels
         uses: RebeccaStevens/issue-closed-labeler-action@latest
         with:
+          repo-token: "${{ secrets.GITHUB_TOKEN }}"
           rules: '[{"condition": "wip", "remove": "wip"}]'