diff --git a/.github/workflows/release-hook-on-closed.yml b/.github/workflows/release-hook-on-closed.yml
index 17bcbccd7..074cc989c 100644
--- a/.github/workflows/release-hook-on-closed.yml
+++ b/.github/workflows/release-hook-on-closed.yml
@@ -12,6 +12,8 @@ jobs:
     if: ${{ github.repository == 'open-telemetry/opentelemetry-ruby' }}
     permissions:
       contents: write # required for creating releases
+      pull-requests: write # required for updating label on PR, posting comments
+      issues: write # required for creating new issues on failed releases
     env:
       ruby_version: "3.1"
     runs-on: ubuntu-latest
diff --git a/.github/workflows/release-retry.yml b/.github/workflows/release-retry.yml
index 50479da2a..93e6a1f53 100644
--- a/.github/workflows/release-retry.yml
+++ b/.github/workflows/release-retry.yml
@@ -19,6 +19,8 @@ jobs:
     if: ${{ github.repository == 'open-telemetry/opentelemetry-ruby' }}
     permissions:
       contents: write # required for creating releases
+      pull-requests: write # required for updating open release PRs
+      issues: write # required for creating new issues on failed releases
     env:
       ruby_version: "3.1"
     runs-on: ubuntu-latest