diff --git a/.github/workflows/manual-mac-pr.yaml b/.github/workflows/manual-mac-pr.yaml
index 46b6d8e..a9d0d70 100644
--- a/.github/workflows/manual-mac-pr.yaml
+++ b/.github/workflows/manual-mac-pr.yaml
@@ -7,5 +7,10 @@ permissions:
 jobs:
   qc:
     uses: ./.github/workflows/qc-mac.yaml
+    permissions:
+      checks: write
+      contents: read
   nix:
     uses: ./.github/workflows/nix-mac.yaml
+    permissions:
+      contents: write