diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 995e53a..bf4bb56 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -5,6 +5,8 @@ on:
 jobs:
   web:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write # allow surge-preview to create/update PR comments
     env:
       BUNDLE_GEMFILE: ${{ github.workspace }}/web/Gemfile
     steps:
@@ -40,6 +42,8 @@ jobs:
   
   docs:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write # allow surge-preview to create/update PR comments
     steps:
       - name: Clone repository
         uses: actions/checkout@v4