diff --git a/.github/workflows/create-draft-release.yml b/.github/workflows/create-draft-release.yml
index d77564d..63d1202 100644
--- a/.github/workflows/create-draft-release.yml
+++ b/.github/workflows/create-draft-release.yml
@@ -9,7 +9,12 @@ permissions:
 jobs:
   update_release_draft:
     if: github.event.pull_request.merged == true
-    permissions: write-all
+    permissions:
+      # write permission is required to create a github release
+      contents: write
+      # write permission is required for autolabeler
+      # otherwise, read permission is required at least
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - uses: release-drafter/release-drafter@v5