diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index ae3c0b0..2674988 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -22,6 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.event.pull_request.user.login != 'dependabot[bot]'
     permissions:
+      actions: read
       contents: read
       pull-requests: write
       issues: write