diff --git a/.github/chainguard/update-yara-x.sts.yaml b/.github/chainguard/update-yara-x.sts.yaml
index 1cdc0bc6d..cd61555b3 100644
--- a/.github/chainguard/update-yara-x.sts.yaml
+++ b/.github/chainguard/update-yara-x.sts.yaml
@@ -6,3 +6,4 @@ claim_pattern:
 permissions:
   contents: write
   pull_requests: write
+  workflows: write