diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8c6be7a..84c5baa 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -180,6 +180,7 @@ jobs:
     permissions:
       contents: read
       checks: write # audit-check posts its report as a check run
+      issues: write # audit-check posts scheduled reports as issues
     steps:
       - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
       - uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
@@ -187,6 +188,4 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
           # Mirrors deny.toml: ttf-parser is unmaintained but reaches us
           # only through winit's Wayland titlebar path; no fix exists yet.
-          # (Un-ignored warnings also make the action file issues, which
-          # this job has no permission to do.)
           ignore: RUSTSEC-2026-0192