diff --git a/.github/workflows/covector-version-or-publish.yml b/.github/workflows/covector-version-or-publish.yml
index 5c26c445..1b4ecb3c 100644
--- a/.github/workflows/covector-version-or-publish.yml
+++ b/.github/workflows/covector-version-or-publish.yml
@@ -15,6 +15,8 @@ jobs:
 
     permissions:
         actions: write # required for workflow_dispatch
+        contents: write # required to create new releases
+        pull-requests: write # required to open version update pr
 
     steps:
       - uses: actions/checkout@v4