diff --git a/.github/workflows/updates.yaml b/.github/workflows/updates.yaml
index 00256aa..0e7e093 100644
--- a/.github/workflows/updates.yaml
+++ b/.github/workflows/updates.yaml
@@ -18,6 +18,7 @@ jobs:
   check-for-fixes:
     runs-on: ubuntu-latest
     permissions:
+      actions: read
       contents: read
       packages: write
       id-token: write