diff --git a/.github/chainguard/audit-gh-automation.sts.yaml b/.github/chainguard/audit-gh-automation.sts.yaml
index 052810f..7169fe2 100644
--- a/.github/chainguard/audit-gh-automation.sts.yaml
+++ b/.github/chainguard/audit-gh-automation.sts.yaml
@@ -7,6 +7,7 @@ claim_pattern:
   job_workflow_ref: chainguard-dev/infra/.github/workflows/audit-gh-automation.yaml@refs/heads/main
 
 permissions:
+  administration: read # read repository
   members: read # to read GitHub members
   metadata: read # to read metadata about the org