diff --git a/data/reusables/actions/workflow-runs-dependabot-note.md b/data/reusables/actions/workflow-runs-dependabot-note.md
index be4c9ebfdf8e..1714303b4a4f 100644
--- a/data/reusables/actions/workflow-runs-dependabot-note.md
+++ b/data/reusables/actions/workflow-runs-dependabot-note.md
@@ -1 +1 @@
-Workflow runs triggered by {% data variables.product.prodname_dependabot %} pull requests run as if they are from a forked repository, and therefore use a read-only `GITHUB_TOKEN`. These workflow runs cannot access any secrets. For information about strategies to keep these workflows secure, see [AUTOTITLE](/actions/reference/security/secure-use).
+By default, workflow runs triggered by {% data variables.product.prodname_dependabot %} pull requests use a read-only `GITHUB_TOKEN`. You can use the `permissions` key in your workflow to increase the access for the token. For more information, see [AUTOTITLE](/code-security/reference/supply-chain-security/troubleshoot-dependabot/dependabot-on-actions). For information about strategies to keep these workflows secure, see [AUTOTITLE](/actions/reference/security/secure-use).