diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 051f59c..f4cfb10 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -35,7 +35,8 @@ jobs:
           permission-issues: write
           permission-workflows: write
           permission-checks: read
-          permission-statuses: read
+          permission-statuses: write
+          permission-vulnerability-alerts: read
       - name: Run Renovate
         uses: renovatebot/github-action@f0f41e5f2e706165f6814b1d0f0d0e319de7d1d9 # v46.3.8
         with: