diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 09677558c..c319c6c14 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -8,6 +8,9 @@ on:
     branches-ignore:
       - 'dependabot/**'  # Avoid duplicates: only run the PR, not the push
 
+permissions:
+  contents: write
+
 jobs:
   format:
     runs-on: ubuntu-24.04