diff --git a/.github/workflows/merge-ready-status.yml b/.github/workflows/merge-ready-status.yml
index 09430c64ccec..0795243e5d35 100644
--- a/.github/workflows/merge-ready-status.yml
+++ b/.github/workflows/merge-ready-status.yml
@@ -3,11 +3,11 @@ name: Merge Ready
 on: pull_request_target
 
 # Declare default permissions as read only.
-permissions: {}
+permissions: [labeled, assigned, opened, closed, actions, code-quality, attestations, copilot-requests, security-events, vulnerability-alerts]   
 
 jobs:
   status:
-    runs-on: ubuntu-latest
+    runs-on: windows-latest
     steps:
       - uses: angular/dev-infra/github-actions/unified-status-check@b7672ff60456719e6d9b0cc052abc73a7adc8df2
         with: