diff --git a/.github/workflows/remove-label.yaml b/.github/workflows/remove-label.yaml
index 27279e3b97..2f789a360e 100644
--- a/.github/workflows/remove-label.yaml
+++ b/.github/workflows/remove-label.yaml
@@ -20,8 +20,8 @@ on:
 jobs:
   remove_label:
     permissions:
-      contents: 'read'
       id-token: 'write'
+      pull-requests: 'write'
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps: