diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml
index 3526c86..b0e0c08 100644
--- a/.github/workflows/apply.yml
+++ b/.github/workflows/apply.yml
@@ -74,6 +74,7 @@ jobs:
     permissions:
       id-token: write
       contents: read
+      pull-requests: read
     env:
       KOSLI_ORG: ${{ inputs.kosli_org }}
       KOSLI_HOST: ${{ inputs.kosli_host }}