diff --git a/.gitea/workflows/pr-checks.yml b/.gitea/workflows/pr-checks.yml
index e139d5e..2e4b7f8 100644
--- a/.gitea/workflows/pr-checks.yml
+++ b/.gitea/workflows/pr-checks.yml
@@ -58,5 +58,9 @@ jobs:
           restore-keys: |
             gradle-${{ runner.os }}-
 
+      # chmod defensively: this runner's checkout doesn't preserve the git
+      # executable bit, so `./gradlew` alone fails with "Permission denied".
       - name: Lint, test, assemble debug
-        run: ./gradlew --no-daemon lint test assembleDebug
+        run: |
+          chmod +x ./gradlew
+          ./gradlew --no-daemon lint test assembleDebug