From 3f3ab13655932298254cffb4dd08d7ce5c89f212 Mon Sep 17 00:00:00 2001
From: "Michael B. Gale" <mbg@github.com>
Date: Wed, 7 Oct 2026 12:31:03 +0100
Subject: [PATCH] Add additional permission

---
 .github/workflows/__pr.yml | 1 +
 pr-checks/sync.ts          | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/__pr.yml b/.github/workflows/__pr.yml
index fe5e4ec47..36cc469a7 100644
--- a/.github/workflows/__pr.yml
+++ b/.github/workflows/__pr.yml
@@ -61,6 +61,7 @@ jobs:
     permissions:
       contents: read
       security-events: write
+      pull-requests: write
     uses: ./.github/workflows/pr-checks.yml
   all-platform-bundle:
     needs:
diff --git a/pr-checks/sync.ts b/pr-checks/sync.ts
index 55be2188b..ed51989b7 100755
--- a/pr-checks/sync.ts
+++ b/pr-checks/sync.ts
@@ -745,7 +745,7 @@ function main(): void {
   let allInputs: Record<string, WorkflowInput> = {};
 
   const initialChecksJob = workflowCall("Initial checks", "pr-checks", {
-    permissions: { "security-events": "write" },
+    permissions: { "security-events": "write", "pull-requests": "write" },
   });
 
   const cron = new yaml.Scalar("0 5 * * *");