diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 00f340a..4b09cc6 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -2,6 +2,9 @@ name: PR Checks
 on:
   pull_request:
     types: [opened, reopened, synchronize, edited]
+permissions:
+  pull-requests: read
+  issues: write
 jobs:
   validate:
     runs-on: ubuntu-latest