diff --git a/gh-agent-workflows/pr-review-fork/example.yml b/gh-agent-workflows/pr-review-fork/example.yml
index 6585a690..d846352c 100644
--- a/gh-agent-workflows/pr-review-fork/example.yml
+++ b/gh-agent-workflows/pr-review-fork/example.yml
@@ -25,7 +25,9 @@ on:
     types: [opened, synchronize, reopened, ready_for_review, labeled, unlabeled]
 
 permissions:
+  actions: read
   contents: read
+  copilot-requests: write
   issues: write  # needed for no-op run tracking issue
   pull-requests: write