diff --git a/.github/workflows/require-pr-label.yml b/.github/workflows/require-pr-label.yml
index ee91e2a39a198d..d7c2580d4e0808 100644
--- a/.github/workflows/require-pr-label.yml
+++ b/.github/workflows/require-pr-label.yml
@@ -10,8 +10,7 @@ jobs:
     if: github.repository_owner == 'python'
     runs-on: ubuntu-latest
     permissions:
-      issues: write
-      pull-requests: write
+      pull-requests: read
     timeout-minutes: 10
 
     steps: