diff --git a/.github/workflows/cloud-runner-pipeline.yml b/.github/workflows/cloud-runner-pipeline.yml
index 36e22c90..4e8dc38f 100644
--- a/.github/workflows/cloud-runner-pipeline.yml
+++ b/.github/workflows/cloud-runner-pipeline.yml
@@ -6,6 +6,8 @@ on:
 
 permissions:
   checks: write
+  content: read
+  actions: write
 
 env:
   GKE_ZONE: 'us-central1'