diff --git a/.github/workflows/hugo.yml b/.github/workflows/hugo.yml
index 55c7086..5b51a37 100644
--- a/.github/workflows/hugo.yml
+++ b/.github/workflows/hugo.yml
@@ -18,6 +18,8 @@ permissions:
   contents: read
   pages: write
   id-token: write
+  issues: write
+  pull-requests: write
 
 # Allow only one concurrent deployment, skipping runs queued between the run in-progress and latest queued.
 # However, do NOT cancel in-progress runs as we want to allow these production deployments to complete.
@@ -130,6 +132,7 @@ jobs:
       - name: Comment PR
         uses: actions/github-script@v7
         with:
+          github-token: ${{secrets.GITHUB_TOKEN}}
           script: |
             const domain = `thepotato-tech-pr-${{ github.event.number }}.surge.sh`;
             github.rest.issues.createComment({