diff --git a/.github/workflows/smoke-water.yml b/.github/workflows/smoke-water.yml
index 15ef4998984..092cb95380c 100644
--- a/.github/workflows/smoke-water.yml
+++ b/.github/workflows/smoke-water.yml
@@ -11,6 +11,7 @@ jobs:
     uses: ./.github/workflows/smoke-workflow-call.lock.yml
     secrets: inherit
     permissions:
+      actions: read
       contents: read
       discussions: write
       issues: write