diff --git a/.github/workflows/repl-artefacts.yml b/.github/workflows/repl-artefacts.yml
index 04f8d067986..d8b45bee191 100644
--- a/.github/workflows/repl-artefacts.yml
+++ b/.github/workflows/repl-artefacts.yml
@@ -10,6 +10,8 @@ permissions:
 jobs:
   upload:
     permissions:
+      pull-requests: write
+      contents: write
       issues: write # for peter-evans/find-comment and peter-evans/create-or-update-comment
     if: ${{ github.event.pull_request.head.repo.full_name == 'rollup/rollup' || contains( toJson(github.event.pull_request.labels), 'x⁸ ⚙️ build repl artefacts' ) }}
     runs-on: ubuntu-latest