diff --git a/.github/workflows/auto-label.yml b/.github/workflows/auto-label.yml
index 8570cfe7e..3bec5ba81 100644
--- a/.github/workflows/auto-label.yml
+++ b/.github/workflows/auto-label.yml
@@ -2,6 +2,10 @@ name: Auto Label
 on:
   pull_request:
     types: [opened, reopened, synchronized]
+permissions:
+  pull-requests: write
+  issues: write
+
 jobs:
   label:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 9abb9b837..04d672af7 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -3,6 +3,7 @@ on:
   pull_request:
     types: [opened, reopened, synchronize, edited]
 permissions:
+  pull-requests: write
   issues: write
 jobs:
   validate:
@@ -44,5 +45,9 @@ jobs:
                 core.warning('Skipping PR comment for fork PR (read-only token)');
                 issues.forEach(issue => core.warning(issue));
               }
-              core.setFailed('PR validation failed');
+
+              const hasErrors = issues.some(issue => issue.includes('❌'));
+              if (hasErrors) {
+                core.setFailed('PR validation failed');
+              }
             }