diff --git a/.github/workflows/_test-terraform-plan-apply.yml b/.github/workflows/_test-terraform-plan-apply.yml
index b91a05c..33d5590 100644
--- a/.github/workflows/_test-terraform-plan-apply.yml
+++ b/.github/workflows/_test-terraform-plan-apply.yml
@@ -21,11 +21,12 @@ jobs:
     permissions:
       packages: read
       actions: read
-      contents: read
+      contents: write
       security-events: write
       statuses: write
       checks: write
       id-token: write
+      pull-requests: write
     secrets:
       REPO_SSH_DEPLOY_KEY: ${{ secrets.SSH_DEPLOY_KEY }}
       AWS_ACCOUNT_ID: ${{ secrets.TEST_AWS_ACCOUNT_ID }}