diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index ee0cb96..6a9f04d 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -3,7 +3,14 @@ on:
   issue_comment:
     types: [created]
   pull_request_target:
-    types: [opened,closed,synchronize]    
+    types: [opened,closed,synchronize]
+
+permissions:
+  actions: write
+  contents: write
+  pull-requests: write
+  statuses: write
+
 jobs:
   CLAssistant:
     runs-on: mdb-dev
@@ -11,12 +18,10 @@ jobs:
       - name: "CLA Assistant"
         if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
         uses: contributor-assistant/github-action@v2.6.1
-        env: 
-          GITHUB_TOKEN: ${{ secrets.CLA_TOKEN }}          
-          PERSONAL_ACCESS_TOKEN : ${{ secrets.CLA_TOKEN }}
-        with: 
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
           path-to-signatures: 'assets/contributions-agreement/cla.json'
-          # Add path to the CLA here
           path-to-document: 'https://github.com/mindsdb/mindsdb/blob/main/assets/contributions-agreement/individual-contributor.md'
           branch: 'cla'
           allowlist: bot*, ZoranPandovski, torrmal, Stpmax, mindsdbadmin, ea-rus, tmichaeldb, dusvyat, hamishfagg, MinuraPunchihewa, martyna-mindsdb, lucas-koontz