diff --git a/.github/workflows/dev-cloudflare-pages.yml b/.github/workflows/dev-cloudflare-pages.yml
index d6c9f79..e9422de 100644
--- a/.github/workflows/dev-cloudflare-pages.yml
+++ b/.github/workflows/dev-cloudflare-pages.yml
@@ -21,7 +21,8 @@ permissions:
 jobs:
   build_and_deploy_job:
     permissions:
-      contents: read # for actions/checkout to fetch code
+      contents: read
+      deployments: write
       pull-requests: write # for Azure/static-web-apps-deploy to comment on PRs
     if: github.event_name == 'push' || (github.event_name == 'pull_request' && github.event.action != 'closed')
     runs-on: [ self-hosted, Linux ]