From 58e24a1255798e3f53ea0a318e2ee743ebc34324 Mon Sep 17 00:00:00 2001
From: Derek Misler <derek.misler@docker.com>
Date: Fri, 6 Mar 2026 16:10:10 -0500
Subject: [PATCH] WIP [2026-03-06 16:10:10]

Signed-off-by: Derek Misler <derek.misler@docker.com>
---
 .github/workflows/pr-review.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml
index 67cc90463..0510d8845 100644
--- a/.github/workflows/pr-review.yml
+++ b/.github/workflows/pr-review.yml
@@ -10,10 +10,13 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
-  issues: write
 
 jobs:
   review:
     uses: docker/cagent-action/.github/workflows/review-pr.yml@latest
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+      checks: write
     secrets: inherit