diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml
index 6c3fe159a..0efc8927c 100644
--- a/.github/workflows/update-deps.yml
+++ b/.github/workflows/update-deps.yml
@@ -10,25 +10,26 @@ on:
       - main
   workflow_dispatch:
 
+permissions:
+  contents: write
+  pull-requests: write
+  actions: write
+
 jobs:
   cli:
-    if: github.repository == 'getsentry/sentry-android-gradle-plugin'
-    uses: getsentry/github-workflows/.github/workflows/updater.yml@v2
-    with:
-      path: plugin-build/sentry-cli.properties
-      name: CLI
-    secrets:
-      # If a custom token is used instead, a CI would be triggered on a created PR.
-      api-token: ${{ secrets.CI_DEPLOY_KEY }}
-      #  api-token: ${{ github.token }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: getsentry/github-workflows/updater@v3
+        with:
+          path: plugin-build/sentry-cli.properties
+          name: CLI
+          ssh-key: ${{ secrets.CI_DEPLOY_KEY }}
 
   android:
-    if: github.repository == 'getsentry/sentry-android-gradle-plugin'
-    uses: getsentry/github-workflows/.github/workflows/updater.yml@v2
-    with:
-      path: scripts/update-android.sh
-      name: Android SDK
-    secrets:
-      # If a custom token is used instead, a CI would be triggered on a created PR.
-      api-token: ${{ secrets.CI_DEPLOY_KEY }}
-      # api-token: ${{ github.token }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: getsentry/github-workflows/updater@v3
+        with:
+          path: scripts/update-android.sh
+          name: Android SDK
+          ssh-key: ${{ secrets.CI_DEPLOY_KEY }}