diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index f516871..0a15ff4 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -89,6 +89,7 @@ jobs:
     needs: release-plz-release
     if: needs.release-plz-release.outputs.releases_created == 'true' && needs.release-plz-release.outputs.release_tag != ''
     permissions:
+      actions: read
       contents: read
       id-token: write
       packages: write