diff --git a/.github/workflows/commit-queue.yml b/.github/workflows/commit-queue.yml
index 641fe2a7174..a4d61132dee 100644
--- a/.github/workflows/commit-queue.yml
+++ b/.github/workflows/commit-queue.yml
@@ -59,7 +59,10 @@ jobs:
     needs: get_candidate_prs
     if: needs.get_candidate_prs.outputs.candidates != ''
     permissions:
+      checks: read
+      contents: read
       pull-requests: read
+      statuses: read
     runs-on: ubuntu-slim
     steps:
       # Install dependencies