diff --git a/.github/chainguard/approver-bot.sts.yaml b/.github/chainguard/approver-bot.sts.yaml
index 038079b..54a6bd9 100644
--- a/.github/chainguard/approver-bot.sts.yaml
+++ b/.github/chainguard/approver-bot.sts.yaml
@@ -4,7 +4,7 @@ issuer: https://accounts.google.com
 subject: "114898805784176589833"
 
 permissions:
-  contents: read
+  contents: write
   checks: read
   pull_requests: write
 
diff --git a/.github/chainguard/staging-approver-bot.sts.yaml b/.github/chainguard/staging-approver-bot.sts.yaml
index da3d1b3..8664dba 100644
--- a/.github/chainguard/staging-approver-bot.sts.yaml
+++ b/.github/chainguard/staging-approver-bot.sts.yaml
@@ -4,7 +4,7 @@ issuer: https://accounts.google.com
 subject: "104099575245879501824"
 
 permissions:
-  contents: read
+  contents: write
   checks: read
   pull_requests: write