diff --git a/.github/workflows/__pr.yml b/.github/workflows/__pr.yml
index fe5e4ec47..36cc469a7 100644
--- a/.github/workflows/__pr.yml
+++ b/.github/workflows/__pr.yml
@@ -61,6 +61,7 @@ jobs:
     permissions:
       contents: read
       security-events: write
+      pull-requests: write
     uses: ./.github/workflows/pr-checks.yml
   all-platform-bundle:
     needs:
diff --git a/pr-checks/sync.ts b/pr-checks/sync.ts
index 55be2188b..ed51989b7 100755
--- a/pr-checks/sync.ts
+++ b/pr-checks/sync.ts
@@ -745,7 +745,7 @@ function main(): void {
   let allInputs: Record<string, WorkflowInput> = {};
 
   const initialChecksJob = workflowCall("Initial checks", "pr-checks", {
-    permissions: { "security-events": "write" },
+    permissions: { "security-events": "write", "pull-requests": "write" },
   });
 
   const cron = new yaml.Scalar("0 5 * * *");