diff --git a/.github/workflows/check-iana-registries.yml b/.github/workflows/check-iana-registries.yml
index 998a7562419..cbd2fa74b70 100644
--- a/.github/workflows/check-iana-registries.yml
+++ b/.github/workflows/check-iana-registries.yml
@@ -14,11 +14,11 @@ jobs:
       pull-requests: write
 
     steps:
-      - name: Checkout iana/data from main branch
+      - name: Checkout iana/data from main branch # zizmor: ignore[artipacked] we need the persisted credentials to git push
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           sparse-checkout: iana/data
-          persist-credentials: false
+          token: ${{ secrets.GITHUB_TOKEN }}
 
       # If the branch already exists, this will fail, which will remind us about
       # the outstanding PR.