diff --git a/.github/workflows/full-check.yml b/.github/workflows/full-check.yml
index 5aca8cd6bb..257b7843a2 100644
--- a/.github/workflows/full-check.yml
+++ b/.github/workflows/full-check.yml
@@ -15,6 +15,9 @@ on:
     # Allow running manually
   pull_request:
     types: [ labeled, synchronize ]
+permissions:
+  # allow publishing JUnit report for PRs
+  checks: write 
 jobs:
   build:
     if: ${{ !github.event.pull_request || contains(github.event.pull_request.labels.*.name, 'ready') }}