Although the permission to modify PRs is granted to the entire workflow, the job still reports that it does not the permission to do so: GITHUB_TOKEN Permissions Contents: read Metadata: read PullRequests: read This adds the permission to the job directly