diff --git a/.github/workflows/contrib.yaml b/.github/workflows/contrib.yaml
index 6b1c4a39a3a23..11a0888610546 100644
--- a/.github/workflows/contrib.yaml
+++ b/.github/workflows/contrib.yaml
@@ -29,6 +29,7 @@ jobs:
     if: github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == 'coder/coder'
     permissions:
       pull-requests: write
+      contents: write
     steps:
       - name: Dependabot metadata
         id: metadata