diff --git a/.github/workflows/cache_cleanup.yml b/.github/workflows/cache_cleanup.yml
index 94188b379cc..9d2859a75fc 100644
--- a/.github/workflows/cache_cleanup.yml
+++ b/.github/workflows/cache_cleanup.yml
@@ -1,4 +1,4 @@
-# https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/caching-dependencies-to-speed-up-workflows#force-deleting-cache-entries
+# https://github.com/actions/cache/blob/main/tips-and-workarounds.md#force-deletion-of-caches-overriding-default-cache-eviction-policy
 name: 🧹 Cache Cleanup
 on:
   pull_request:
@@ -9,6 +9,10 @@ jobs:
   cleanup:
     name: Cleanup PR caches
     runs-on: ubuntu-latest
+    permissions:
+      # `actions:write` permission is required to delete caches
+      actions: write
+      contents: read
     steps:
       - name: Cleanup
         env: