diff --git a/.github/workflows/pr-cloud-comment.yml b/.github/workflows/pr-cloud-comment.yml
index ad638be90c..f5728fc2d3 100644
--- a/.github/workflows/pr-cloud-comment.yml
+++ b/.github/workflows/pr-cloud-comment.yml
@@ -2,6 +2,12 @@ name: PR cloud build comment
 on:
   pull_request:
     types: [opened]
+    branches:
+      - master
+      - '*-maintenance'
+
+permissions:
+  pull-requests: write
 
 jobs:
   comment-pr: