diff --git a/.github/workflows/clang-format-run-pr.yml b/.github/workflows/clang-format-run-pr.yml
index a11fd26161..f3815c3f74 100644
--- a/.github/workflows/clang-format-run-pr.yml
+++ b/.github/workflows/clang-format-run-pr.yml
@@ -27,14 +27,20 @@ on:
 
 permissions:
   actions: write
+  contents: write
 
 env:
   CLANG_VERSION: 14
 
 jobs:
 
-  run-on-pr: 
-    # Run on branchs, not forked PR branches
+  run-on-pr:
+    permissions:
+      contents: write
+      pull-requests: write
+      actions: write
+
+    # Run on branches, not forked PR branches
     if: |
       contains(github.event.comment.body, '/clang-format-run')
 
@@ -47,7 +53,7 @@ jobs:
       run: |
         sudo apt-get install clang-format-${CLANG_VERSION}
 
-    - uses: actions/github-script@v6
+    - uses: actions/github-script@v7
       id: get-pr
       with:
         script: |