diff --git a/.github/workflows/ingest-maintained-apps.yml b/.github/workflows/ingest-maintained-apps.yml
index 046d1a81d7..9ba431d96b 100644
--- a/.github/workflows/ingest-maintained-apps.yml
+++ b/.github/workflows/ingest-maintained-apps.yml
@@ -4,11 +4,17 @@ on:
   push:
     branches:
       - main
+    paths:
+      - 'ee/maintained-apps/**'
   workflow_dispatch:
   schedule:
     - cron: '0 14 * * *'
     - cron: '0 21 * * *'
 
+permissions:
+  contents: write         # Required to push new branch
+  pull-requests: write    # Required to open PRs
+
 jobs:
   build:  
     runs-on: ubuntu-latest