diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 6f329f1..db968a5 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -9,6 +9,8 @@ jobs:
     name: Update cve-feed-osv
     permissions:
       contents: write
+      pull-requests: write
+      repository-projects: write
     runs-on: ubuntu-latest
     env:
       REPOSITORY_OWNER: ${{ github.repository_owner }}