diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml
index 67cc90463..0510d8845 100644
--- a/.github/workflows/pr-review.yml
+++ b/.github/workflows/pr-review.yml
@@ -10,10 +10,13 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
-  issues: write
 
 jobs:
   review:
     uses: docker/cagent-action/.github/workflows/review-pr.yml@latest
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+      checks: write
     secrets: inherit