diff --git a/.github/workflows/pd.yml b/.github/workflows/pd.yml
index f310bf444..f87cde3c9 100644
--- a/.github/workflows/pd.yml
+++ b/.github/workflows/pd.yml
@@ -151,6 +151,9 @@ jobs:
           EOF
       - name: "Comment on PR"
         uses: actions/github-script@v7
+        permissions:
+          actions: write
+          pull-requests: write
         with:
           script: |
             const fs = require('fs')