diff --git a/.github/workflows/lock.yaml b/.github/workflows/lock.yaml
index a7b096a45fc..e046e830656 100644
--- a/.github/workflows/lock.yaml
+++ b/.github/workflows/lock.yaml
@@ -2,6 +2,11 @@
 
 name: 'Lock Threads'
 
+# By specifying the access of one of the scopes, all of those that are not
+# specified are set to 'none'.
+permissions:
+  issues: write
+
 on:
   schedule:
     - cron: '0 * * * *'