diff --git a/.github/workflows/charts.yml b/.github/workflows/charts.yml
index 1f7c6c1..6179eda 100644
--- a/.github/workflows/charts.yml
+++ b/.github/workflows/charts.yml
@@ -100,6 +100,8 @@ jobs:
     uses: saidsef/saidsef/.github/workflows/dependency-review.yaml@main
     if: ${{ github.event_name == 'pull_request' }}
     needs: [chart]
+    permissions:
+      pull-requests: read
 
   k8s-test:
     runs-on: ubuntu-latest