diff --git a/.github/workflows/move-ready-to-merge-pr.yaml b/.github/workflows/move-ready-to-merge-pr.yaml
index d4883db1b7e4..ae92211e3f82 100644
--- a/.github/workflows/move-ready-to-merge-pr.yaml
+++ b/.github/workflows/move-ready-to-merge-pr.yaml
@@ -10,6 +10,7 @@ on:
       - labeled
 
 permissions:
+  contents: read
   pull-requests: write
 
 jobs:
@@ -34,6 +35,8 @@ jobs:
           ignore-if-assigned: 'false'
           remove-labels: 'waiting for review'
 
+      - name: Check out repo
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
       - uses: ./.github/actions/slack-alert
         with:
           slack_channel_id: ${{ secrets.DOCS_ALERTS_SLACK_CHANNEL_ID }}