diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
index 788a7642421..4e985e68d35 100644
--- a/.github/workflows/renovate.yml
+++ b/.github/workflows/renovate.yml
@@ -33,6 +33,7 @@ jobs:
             pull_requests: write
             issues: write
             workflows: write
+            vulnerability_alerts: read
 
       - name: Run Renovate
         uses: renovatebot/github-action@dcfba84a42d1b5d5e49bf131b1bf53511851a123 # v46.3.1