diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9f1c8e29..f41e5f1d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,6 +39,7 @@ jobs:
       url: https://pypi.org/p/gotrue
     permissions:
       id-token: write # IMPORTANT: this permission is mandatory for trusted publishing
+      contents: write # needed for dependabot to write to repo
     steps:
       - name: Clone Repository
         uses: actions/checkout@v3