diff --git a/.github/workflows/comment-pr.yml b/.github/workflows/comment-pr.yml
index b1d161c07999c..13bed8fe0a7e8 100644
--- a/.github/workflows/comment-pr.yml
+++ b/.github/workflows/comment-pr.yml
@@ -8,6 +8,8 @@ on:
 
 jobs:
   Comment:
+    permissions:
+      pull-requests: write
     name: Comment
     runs-on: [self-hosted, Linux, X64, gcp-custom-runners]
     container: ubuntu:jammy-20221130
@@ -75,8 +77,6 @@ jobs:
 
       - name: Post comment
         uses: KeisukeYamashita/create-comment@v1
-        permissions:
-          pull-requests: write
         with:
           number: ${{ steps.get-pr-number.outputs.num }}
           check-only-first-line: "true"