diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 9317eaf0da..40a026f5ca 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -16,6 +16,14 @@ permissions:
   checks: 'write'
   statuses: 'write'
   actions: 'read'
+  attestations: 'read'
+  deployments: 'read'
+  discussions: 'read'
+  issues: 'read'
+  models: 'read'
+  pages: 'read'
+  repository-projects: 'read'
+  id-token: 'read'
 
 concurrency:
   group: '${{ github.workflow }}-${{ github.head_ref || github.ref }}'