diff --git a/.github/workflows/shadow.yml b/.github/workflows/shadow.yml
index f3a2a78cd8..ae1d7a8e87 100644
--- a/.github/workflows/shadow.yml
+++ b/.github/workflows/shadow.yml
@@ -2,18 +2,19 @@ name: "Shadow reviews"
 
 on:
   pull_request:
-    types: 
+    types:
     - review_requested
     branches:
-      - master
+    - master
+
+permissions: write-all
 
 jobs:
   shadow-reviewer:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - name: Add shadow reviewer
-        run: gh pr edit --add-reviewer @GoogleCloudPlatform/gcsfuse-shadow-reviewers "$PR_URL"
-        env:
-          GH_TOKEN: ${{ secrets.SHADOW_REVIEWER_CLASSIC }}
-          PR_URL: ${{github.event.pull_request.html_url}}
+    - name: Add shadow reviewer
+      run: gh pr edit --add-reviewer @GoogleCloudPlatform/gcsfuse-shadow-reviewers "$PR_URL"
+      env:
+        PR_URL: ${{github.event.pull_request.html_url}}