diff --git a/.github/workflows/sync-langs.yml b/.github/workflows/sync-langs.yml
index 43b2f65..9043f06 100644
--- a/.github/workflows/sync-langs.yml
+++ b/.github/workflows/sync-langs.yml
@@ -5,11 +5,14 @@ on:
     branches:
       - 'renovate/arborium-crates'
 
+permissions:
+  contents: write
+
 jobs:
   sync:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
 
       - name: Sync language features
         run: python3 scripts/sync-langs.py --ci