diff --git a/.github/workflows/osv-scanner-pr.yaml b/.github/workflows/osv-scanner-pr.yaml
index 9a0aee3ff..1b380c5a1 100644
--- a/.github/workflows/osv-scanner-pr.yaml
+++ b/.github/workflows/osv-scanner-pr.yaml
@@ -12,6 +12,7 @@ permissions:
   security-events: write
   # Only need to read contents
   contents: read
+  actions: read
 
 jobs:
   scan-pr: