diff --git a/.github/workflows/apidoc.yml b/.github/workflows/apidoc.yml
index 50c8c94dc..ae3d7b5e6 100644
--- a/.github/workflows/apidoc.yml
+++ b/.github/workflows/apidoc.yml
@@ -17,8 +17,12 @@ defaults:
     # to improve debugging some of the longer scripts.
     shell: /bin/bash -o errexit -o pipefail -o xtrace {0}
 
+permissions: {}
 jobs:
   main:
+    permissions:
+      contents: write # for git push
+
     runs-on: ubuntu-20.04
 
     env: