diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index d2768fd250..4c2639b503 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -7,6 +7,7 @@ on:
 
 permissions:
   pull-requests: write
+  contents: write
 
 jobs:
   backport:
@@ -23,6 +24,6 @@ jobs:
         )
       )
     steps:
-      - uses: tibdex/backport@2e217641d82d02ba0603f46b1aeedefb258890ac
+      - uses: tibdex/backport@2e217641d82d02ba0603f46b1aeedefb258890ac # v2.0.3
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}