diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 5839a0907..869a0e41e 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -6,6 +6,7 @@ on:
   workflow_dispatch:             # or manually
 
 permissions:
+  contents: none
   issues: read
   pull-requests: read