diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index a95d610..2385e43 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -9,6 +9,8 @@ jobs:
       matrix:
         os: [ubuntu-20.04, ubuntu-22.04]
     runs-on: [self-hosted, docker]
+    permissions:
+      checks: write
     timeout-minutes: 30
     container:
       image: ghcr.io/project-tsurugi/oltp-sandbox:${{ matrix.os }}
@@ -29,6 +31,7 @@ jobs:
         uses: actions/checkout@v3
         with:
           submodules: true
+          token: ${{ secrets.GHA_PAT }}
 
       - name: CMake_Build
         run: |
@@ -53,6 +56,8 @@ jobs:
 
   Analysis:
     runs-on: [self-hosted, docker]
+    permissions:
+      checks: write
     timeout-minutes: 30
     container:
       image: ghcr.io/project-tsurugi/oltp-sandbox:ubuntu-22.04
@@ -66,6 +71,9 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v3
+        with:
+          submodules: true
+          token: ${{ secrets.GHA_PAT }}
 
       - name: CMake_Generate
         run: |