diff --git a/README.md b/README.md
index 43c29f13..6b78b23f 100644
--- a/README.md
+++ b/README.md
@@ -154,6 +154,9 @@ By default, github-script will use the token provided to your workflow.
 on:
   issues:
     types: [opened]
+# see: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token
+permissions:
+  issues: 'write'
 
 jobs:
   comment: