diff --git a/.github/workflows/ready-for-review.yml b/.github/workflows/ready-for-review.yml
index ab848dfeb..cc02490e2 100644
--- a/.github/workflows/ready-for-review.yml
+++ b/.github/workflows/ready-for-review.yml
@@ -73,6 +73,10 @@ jobs:
 
   evaluate:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      checks: read
+      issues: write
     # Skip non-CodeRabbit reviews
     if: >-
       github.event_name != 'pull_request_review' ||