diff --git a/.github/workflows/data-update.yml b/.github/workflows/data-update.yml
index d5810a967..1c7ff1c2d 100644
--- a/.github/workflows/data-update.yml
+++ b/.github/workflows/data-update.yml
@@ -36,6 +36,7 @@ jobs:
 
     permissions:
       contents: write
+      pull-requests: write
 
     steps:
       - name: Setup Python
@@ -45,6 +46,8 @@ jobs:
 
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: "false"
 
       - name: Setup cache Python
         uses: actions/cache@v4