diff --git a/.github/workflows/build-browser-target.yml b/.github/workflows/build-browser-target.yml
index ef3beef4b8b..e89a41c1009 100644
--- a/.github/workflows/build-browser-target.yml
+++ b/.github/workflows/build-browser-target.yml
@@ -38,6 +38,7 @@ jobs:
     uses: ./.github/workflows/build-browser.yml
     secrets: inherit
     permissions:
-      contents: read
+      contents: write
+      pull-requests: write
       id-token: write
 
diff --git a/.github/workflows/build-desktop-target.yml b/.github/workflows/build-desktop-target.yml
index 31ac819a3e6..96a0e6880f8 100644
--- a/.github/workflows/build-desktop-target.yml
+++ b/.github/workflows/build-desktop-target.yml
@@ -38,6 +38,7 @@ jobs:
     uses: ./.github/workflows/build-desktop.yml
     secrets: inherit
     permissions:
-      contents: read
+      contents: write
+      pull-requests: write
       id-token: write
 
diff --git a/.github/workflows/build-web-target.yml b/.github/workflows/build-web-target.yml
index b1055885400..2f9e201ac60 100644
--- a/.github/workflows/build-web-target.yml
+++ b/.github/workflows/build-web-target.yml
@@ -37,7 +37,8 @@ jobs:
     uses: ./.github/workflows/build-web.yml
     secrets: inherit
     permissions:
-      contents: read
+      contents: write
+      pull-requests: write
       id-token: write
       security-events: write