diff --git a/.github/chainguard/github-rate-limit-checker.sts.yaml b/.github/chainguard/github-rate-limit-checker.sts.yaml
index 7a214a3..8cc9a9c 100644
--- a/.github/chainguard/github-rate-limit-checker.sts.yaml
+++ b/.github/chainguard/github-rate-limit-checker.sts.yaml
@@ -5,6 +5,8 @@ subject_pattern: "113689568553746125790"
 
 permissions:
   contents: read
+  organization_administration: read
+  organization_api_insights: read
 
 # limit the scope to only the repositories that are needed
 # this service will just get the rate limit will not perform any actions in the repo