diff --git a/.github/workflows/diff-spec.yml b/.github/workflows/diff-spec.yml
index 2ab8d3f..15049fe 100644
--- a/.github/workflows/diff-spec.yml
+++ b/.github/workflows/diff-spec.yml
@@ -9,6 +9,9 @@ jobs:
     check-spec:
         name: Check SDK is in sync with spec
         runs-on: ubuntu-latest
+        permissions:
+            contents: write
+            pull-requests: write
         steps:
             - name: Checkout
               uses: actions/checkout@v6