diff --git a/.forgejo/workflows/nyxscanner.yml b/.forgejo/workflows/nyxscanner.yml
index bdda042..2f19de7 100644
--- a/.forgejo/workflows/nyxscanner.yml
+++ b/.forgejo/workflows/nyxscanner.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   nyx-scan:
     runs-on: docker-amd64
+  permissions:
+    issues: write
+    pull-requests: write
 
     steps:
       - name: Checkout PR