diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 13bc9edd4f..e1246d3072 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -110,7 +110,9 @@ jobs:
 
     permissions:
       contents: read
-      id-token: write      # Authenticate with AWS via OIDC
+      pull-requests: read   # Fetch PR comments and reviews
+      issues: read          # Fetch issue comments
+      id-token: write       # Authenticate with AWS via OIDC
       actions: read
 
     outputs: