diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index 3202c9f..4e558e3 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -10,14 +10,18 @@ on:
     types: [opened, reopened, synchronize]
   pull_request_target:
     types: [opened, reopened, synchronize]
-  workflow_dispatch:
+
+permissions:
+  contents: read
+
 jobs:
   update_release_draft:
     permissions:
-      contents: read # limit to read access
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: "📝 Update Release Draft"
         uses: release-drafter/release-drafter@v6
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
\ No newline at end of file
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file