diff --git a/.github/workflows/TESC.yml b/.github/workflows/TESC.yml
index a617e2cfb..7dd93a8e9 100644
--- a/.github/workflows/TESC.yml
+++ b/.github/workflows/TESC.yml
@@ -31,6 +31,10 @@ env:
 
 jobs:
   tesc-operation:
+    permissions:
+      contents: read
+      actions: read
+      deployments: write
     runs-on: ubuntu-24.04
     steps:
       - name: Route TESC operation