diff --git a/.github/workflows/osv-scanner.yml b/.github/workflows/osv-scanner.yml
index 472f27de..62fff27f 100644
--- a/.github/workflows/osv-scanner.yml
+++ b/.github/workflows/osv-scanner.yml
@@ -26,6 +26,7 @@ permissions:
   security-events: write
   # Read commit contents
   contents: read
+  actions: read
 
 jobs:
   scan-scheduled: