diff --git a/.github/workflows/argocd-delete-app.yml b/.github/workflows/argocd-delete-app.yml
index 73a2adcf..c467272d 100644
--- a/.github/workflows/argocd-delete-app.yml
+++ b/.github/workflows/argocd-delete-app.yml
@@ -29,8 +29,10 @@ env:
   APPS_DIR: "vars/aws/dev.heartex.com/k8s/prompt"
 
 jobs:
-
   destroy:
+    permissions:
+      contents: read
+      deployments: write
     timeout-minutes: 15
     runs-on: ubuntu-latest
     steps: