diff --git a/.github/workflows/update_windows_version_definitions.yml b/.github/workflows/update_windows_version_definitions.yml
index 8072a01..9c19d17 100644
--- a/.github/workflows/update_windows_version_definitions.yml
+++ b/.github/workflows/update_windows_version_definitions.yml
@@ -26,6 +26,8 @@ jobs:
         run: python3 build_lists/update_windows_version_defs.py
 
       - name: Create pull request
+        id: create_pr
+        continue-on-error: true
         uses: peter-evans/create-pull-request@v7
         with:
           commit-message: "chore(winpeas): update windows version vulnerability definitions"
@@ -33,3 +35,8 @@ jobs:
           body: "Automated update of `build_lists/windows_version_exploits.json` from latest WES-NG definitions."
           branch: "bot/update-windows-version-definitions"
           delete-branch: true
+
+      - name: Warn when PR creation is blocked by repo policy
+        if: steps.create_pr.outcome == 'failure'
+        run: |
+          echo "::warning::Branch update was pushed, but automatic PR creation failed. If logs show 'GitHub Actions is not permitted to create or approve pull requests', enable that repository setting or use a PAT token for PR creation."