diff --git a/.github/workflows/dependency-change-awareness.yml b/.github/workflows/dependency-change-awareness.yml
index 0680eaee44d..2779da2f373 100644
--- a/.github/workflows/dependency-change-awareness.yml
+++ b/.github/workflows/dependency-change-awareness.yml
@@ -5,7 +5,7 @@ on:
     types: [opened, reopened, synchronize, ready_for_review]
 
 permissions:
-  pull-requests: read
+  pull-requests: write
   issues: write
 
 concurrency:
diff --git a/test/scripts/dependency-change-awareness-workflow.test.ts b/test/scripts/dependency-change-awareness-workflow.test.ts
index 6e3dd323d79..f6f65e7ff72 100644
--- a/test/scripts/dependency-change-awareness-workflow.test.ts
+++ b/test/scripts/dependency-change-awareness-workflow.test.ts
@@ -33,7 +33,7 @@ describe("dependency change awareness workflow", () => {
     expect(workflow).toContain("pull_request_target:");
     expect(workflow).toContain("metadata-only workflow; no checkout or untrusted code execution");
     expect(parsed.permissions).toEqual({
-      "pull-requests": "read",
+      "pull-requests": "write",
       issues: "write",
     });
   });