diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 195ef6073..3aa3ee5f2 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -3,6 +3,10 @@ name: Verify
 on:
   pull_request:
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   merge-request-checks:
     name: Run verify.sh
@@ -56,7 +60,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           COMMENT_OUTPUT: TRUE
-      - uses: mshick/add-pr-comment@v2
+      - uses: mshick/add-pr-comment@v3
         with:
           message: |
             Commit ${{ github.event.pull_request.head.sha }}