diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index e69cdb1..d2271a7 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -4,6 +4,10 @@ on:
   pull_request:
     branches: [ master ]
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   dependency-review:
-    uses: hyperwallet/public-security-workflows/.github/workflows/dependency-review.yml@main
\ No newline at end of file
+    uses: hyperwallet/public-security-workflows/.github/workflows/dependency-review.yml@9c7e8d43f5171799410aff0726f79bc2550639dd