diff --git a/.github/workflows/testTKG.yml b/.github/workflows/testTKG.yml
index 43a15623..0b867931 100644
--- a/.github/workflows/testTKG.yml
+++ b/.github/workflows/testTKG.yml
@@ -4,6 +4,10 @@ on:
     types: [created]
 jobs:
   testTKG:
+    permissions:
+        contents: read
+        issues: write
+        pull-requests: write
     runs-on: ubuntu-latest
     if: startsWith(github.event.comment.body, 'run tkg-test')
     steps: