diff --git a/.github/workflows/cherry_pick.yml b/.github/workflows/cherry_pick.yml
index fc91aadee7b565f57cebc59affd2e94d3087696c..ed0800dc5bbf1ec59182e9d24753e9b5112c4d13 100644
--- a/.github/workflows/cherry_pick.yml
+++ b/.github/workflows/cherry_pick.yml
@@ -37,6 +37,7 @@ jobs:
         private-key: ${{ secrets.ZED_ZIPPY_APP_PRIVATE_KEY }}
         permission-contents: write
         permission-workflows: write
+        permission-pull-requests: write
     - name: cherry_pick::run_cherry_pick::cherry_pick
       run: ./script/cherry-pick "$BRANCH" "$COMMIT" "$CHANNEL"
       env:
diff --git a/tooling/xtask/src/tasks/workflows/cherry_pick.rs b/tooling/xtask/src/tasks/workflows/cherry_pick.rs
index ad8bc1c2c84acc9780bd5d803d893c4657335e90..46fb41094eb9fcea3cf40c4a289217f16855483b 100644
--- a/tooling/xtask/src/tasks/workflows/cherry_pick.rs
+++ b/tooling/xtask/src/tasks/workflows/cherry_pick.rs
@@ -49,6 +49,7 @@ fn run_cherry_pick(
         .with_permissions([
             (TokenPermissions::Contents, Level::Write),
             (TokenPermissions::Workflows, Level::Write),
+            (TokenPermissions::PullRequests, Level::Write),
         ])
         .into();