diff --git a/components/managed-files-guard/managed-files-guard-fleet.yml b/components/managed-files-guard/managed-files-guard-fleet.yml
index 180e4cf1..e7c1bef1 100644
--- a/components/managed-files-guard/managed-files-guard-fleet.yml
+++ b/components/managed-files-guard/managed-files-guard-fleet.yml
@@ -98,7 +98,7 @@ on:
 
 permissions:
   contents: read
-  pull-requests: read
+  pull-requests: read # check-managed-files lists the PR commits to skip all-Dependabot PRs
 
 # Canonical block from the standards `concurrency-policy` component: a newer
 # push to the same pull request cancels the in-flight guard run; the
diff --git a/components/managed-files-guard/managed-files-guard.yml b/components/managed-files-guard/managed-files-guard.yml
index 8b823227..5269605b 100644
--- a/components/managed-files-guard/managed-files-guard.yml
+++ b/components/managed-files-guard/managed-files-guard.yml
@@ -82,7 +82,7 @@ on:
 
 permissions:
   contents: read
-  pull-requests: read
+  pull-requests: read # check-managed-files lists the PR commits to skip all-Dependabot PRs
 
 # Canonical block from the standards `concurrency-policy` component: a newer
 # push to the same pull request cancels the in-flight guard run; the