diff --git a/.github/workflows/plugin-e2e.yml b/.github/workflows/plugin-e2e.yml
index 32f76c2..d9c3f21 100644
--- a/.github/workflows/plugin-e2e.yml
+++ b/.github/workflows/plugin-e2e.yml
@@ -21,6 +21,7 @@ on:
 permissions:
   contents: read
   pull-requests: write   # merge-guard drafts a PR whose plugin-e2e is red
+  actions: write         # DEC-074 count-based artifact retention: delete superseded e2e artifacts
 
 jobs:
   e2e: