diff --git a/.github/workflows/secret-scanner.yml b/.github/workflows/secret-scanner.yml
index 06de3f7..8db5318 100644
--- a/.github/workflows/secret-scanner.yml
+++ b/.github/workflows/secret-scanner.yml
@@ -17,10 +17,8 @@ concurrency:
 # since the 2026-06-24 repin. The caller must grant the superset.
 permissions:
   contents: read
-  pull-requests: write
-  actions: read
 
 jobs:
   scan:
-    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@d135b05bfc647d0c0fbfedc7e80f37ea50f49236
+    uses: hyperpolymath/standards/.github/workflows/secret-scanner-reusable.yml@c65436ee3351cd6b0fa14b142938b195efc77586
     secrets: inherit