diff --git a/.github/workflows/action_scanning.yml b/.github/workflows/action_scanning.yml
index e40741c..7368582 100644
--- a/.github/workflows/action_scanning.yml
+++ b/.github/workflows/action_scanning.yml
@@ -13,6 +13,7 @@ on:
 permissions:
   contents: read
   security-events: write
+  actions: read
 
 jobs:
   semgrep:
@@ -34,7 +35,7 @@ jobs:
         env:
           GH_REPO_OWNER: ${{ github.repository_owner }}
         with:
-          repository: '${{ env.GH_REPO_OWNER }}/github-team'
+          repository: 'google/github-team'
           path: action_scanning
     
       - name: Run Actions semgrep scan
@@ -50,4 +51,4 @@ jobs:
         uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: semgrep-results-actions.sarif
-        if: always()
\ No newline at end of file
+        if: always()