diff --git a/.github/workflows/check-pinned-versions.yml b/.github/workflows/check-pinned-versions.yml
index da8adc314..71e3f41ce 100644
--- a/.github/workflows/check-pinned-versions.yml
+++ b/.github/workflows/check-pinned-versions.yml
@@ -6,6 +6,10 @@ on:
   schedule:
     - cron: '0 0 * * *'  # Run at midnight UTC every day
 
+permissions:
+  issues: write
+  contents: read
+
 jobs:
   validate-json:
     runs-on: ubuntu-latest
@@ -16,3 +20,5 @@ jobs:
       - name: Validate JSON Schema
         shell: pwsh
         run: ./helpers/CheckOutdatedVersionPinning.ps1
+        env:
+          GH_TOKEN: ${{ github.token }}