diff --git a/.github/workflows/claude-merge-gate.yml b/.github/workflows/claude-merge-gate.yml
index bc78a45..4d66c0f 100644
--- a/.github/workflows/claude-merge-gate.yml
+++ b/.github/workflows/claude-merge-gate.yml
@@ -87,6 +87,7 @@ jobs:
       issues: write
       actions: read
       id-token: write
+      statuses: write  # security/outsider-review status (v1.1.16)
     uses: MervinPraison/github-automation-template/.github/workflows/claude-merge-gate-callable.yml@v1.1.16
     secrets: inherit
     with:
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 89a3085..e9d0b92 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -16,7 +16,7 @@ jobs:
       contents: write
       pull-requests: write
       issues: write
-      actions: read
+      actions: write  # after-claude job (v1.1.16)
       id-token: write
     uses: MervinPraison/github-automation-template/.github/workflows/claude-assistant-callable.yml@v1.1.16
     secrets: inherit