WIP [2026-03-06 16:10:10]

Signed-off-by: Derek Misler <derek.misler@docker.com>

Author: derekmisler

.github/workflows/pr-review.yml

@@ -10,10 +10,13 @@ on:
 
 permissions:
   contents: read
-  pull-requests: write
-  issues: write
 
 jobs:
   review:
     uses: docker/cagent-action/.github/workflows/review-pr.yml@latest
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+      checks: write
     secrets: inherit