diff --git a/workflow-templates/apm-packages-update.yml b/workflow-templates/apm-packages-update.yml
index 62e44a3..9e11c34 100644
--- a/workflow-templates/apm-packages-update.yml
+++ b/workflow-templates/apm-packages-update.yml
@@ -32,8 +32,7 @@ jobs:
   test-apm-update:
     name: APM packages update
     permissions:
-      contents: write
-      pull-requests: write
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Set environment variables depends on event
@@ -66,7 +65,6 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
         with:
-          token: ${{ secrets.APM_UPDATE_TOKEN }}
           ref: ${{ env.BRANCH }}
           persist-credentials: false