diff --git a/.github/workflows/bump-opbeans-node.yml b/.github/workflows/bump-opbeans-node.yml
index 78333cd..bed8be5 100644
--- a/.github/workflows/bump-opbeans-node.yml
+++ b/.github/workflows/bump-opbeans-node.yml
@@ -9,8 +9,7 @@ on:
     - cron:  '0 20 * * 6'
 
 permissions:
-  pull-requests: write
-  contents: write
+  contents: read
 
 jobs:
   bump:
@@ -21,11 +20,9 @@ jobs:
         with:
           node-version: 14
           cache: 'npm'
-      - name: Setup Git
-        uses: elastic/apm-pipeline-library/.github/actions/setup-git@current
-      - name: Install Updatecli in the runner
-        uses: updatecli/updatecli-action@453502948b442d7b9a923de7b40cc7ce8628505c
-      - name: Run Updatecli
-        env:
-          GITHUB_TOKEN: ${{ github.token }}
-        run: updatecli apply --config ./.ci/bump-opbeans-node.yml
+      - uses: elastic/apm-pipeline-library/.github/actions/updatecli@current
+        with:
+          vaultUrl: ${{ secrets.VAULT_ADDR }}
+          vaultRoleId: ${{ secrets.VAULT_ROLE_ID }}
+          vaultSecretId: ${{ secrets.VAULT_SECRET_ID }}
+          pipeline: ./.ci/bump-opbeans-node.yml