diff --git a/.github/chainguard/update-yara-x.sts.yaml b/.github/chainguard/update-yara-x.sts.yaml
index cd61555b3..8d7b9b72a 100644
--- a/.github/chainguard/update-yara-x.sts.yaml
+++ b/.github/chainguard/update-yara-x.sts.yaml
@@ -4,6 +4,7 @@ claim_pattern:
   workflow_ref: chainguard-dev/malcontent/.github/workflows/update-yara-x.yaml@refs/heads/main
 
 permissions:
+  actions: write
   contents: write
   pull_requests: write
   workflows: write