diff --git a/.github/workflows/oc-review.yml b/.github/workflows/oc-review.yml
index c4af5c25..c74aa1f4 100644
--- a/.github/workflows/oc-review.yml
+++ b/.github/workflows/oc-review.yml
@@ -1,7 +1,7 @@
 name: oc review
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, reopened, ready_for_review]
 
 jobs:
@@ -11,7 +11,7 @@ jobs:
     permissions:
       id-token: write
       contents: read
-      pull-requests: read
+      pull-requests: write
       issues: read
 
     steps:
@@ -24,6 +24,7 @@ jobs:
         uses: anomalyco/opencode/github@latest
         env:
           OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           model: opencode/gpt-5.2-codex
           prompt: |