diff --git a/.github/workflows/specification-version-check.yml b/.github/workflows/specification-version-check.yml
index ee75bb2e..1c4834f8 100644
--- a/.github/workflows/specification-version-check.yml
+++ b/.github/workflows/specification-version-check.yml
@@ -6,6 +6,9 @@ name: Specification version check
 jobs:
   # Get the latest TUF specification release and open an issue (if needed)
   specification-bump-check:
+    permissions:
+      contents: read
+      issues: write
     uses: theupdateframework/specification/.github/workflows/check-latest-spec-version.yml@master
     with:
       tuf-version: "v1.0.29" # Should be updated to the according version either manually or extracted automatically as how it's done in python-tuf