diff --git a/.github/workflows/sync-deps.yaml b/.github/workflows/sync-deps.yaml
index f48d8c678..b562f462c 100644
--- a/.github/workflows/sync-deps.yaml
+++ b/.github/workflows/sync-deps.yaml
@@ -17,8 +17,9 @@ env:
   WEBHOOK_REF: "${{ github.ref_name }}"
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
+  # Needed to access to vault
+  id-token: write
 
 jobs:
   sync: