diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index cede3e17..47c714ee 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   check-fork:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     outputs:
       is_fork: ${{ steps.check.outputs.is_fork }}
     steps: