diff --git a/.github/workflows/codebuild-ci.yml b/.github/workflows/codebuild-ci.yml
index d439a6a07d0..20d413a6a54 100644
--- a/.github/workflows/codebuild-ci.yml
+++ b/.github/workflows/codebuild-ci.yml
@@ -29,6 +29,7 @@ env:
 permissions:
   id-token: write
   contents: read
+  pull-requests: write
 
 # Allow one instance of this workflow per pull request, and cancel older runs when new changes are pushed
 concurrency: