diff --git a/.github/chainguard/self.slapr.read-members.sts.yaml b/.github/chainguard/self.slapr.read-members.sts.yaml
new file mode 100644
index 00000000000000..f64cb95f9f2d94
--- /dev/null
+++ b/.github/chainguard/self.slapr.read-members.sts.yaml
@@ -0,0 +1,14 @@
+---
+issuer: https://token.actions.githubusercontent.com
+
+subject: repo:DataDog/datadog-agent:pull_request
+
+claim_pattern:
+  event_name: (pull_request|pull_request_review)
+  ref: refs/(pull/\d+/merge|heads/main)
+  job_workflow_ref: DataDog/datadog-agent/\.github/workflows/slapr\.yml@refs/(pull/\d+/merge|heads/main)
+
+permissions:
+  contents: read
+  pull_requests: read
+  members: read