diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index a5b21639..25ab203d 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -10,14 +10,15 @@ concurrency:
   group: ${{ github.event_name == 'push' && github.ref == 'refs/heads/master' && github.run_id || github.head_ref || github.ref }}-${{ github.workflow }}-${{ github.event_name }}
   cancel-in-progress: true
 
-permissions:
-  contents: read
-
 jobs:
   build:
     name: build kernel and system
     runs-on: namespace-profile-arm64-8x16-2004-caching
     timeout-minutes: 60
+    permissions:
+      contents: read
+      pull-requests: write
+      actions: read
     steps:
     - uses: actions/checkout@v4
       with: