diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index 9f9b261a9..4364538d8 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -8,6 +8,9 @@ on:
     branches:
       - master
       - "feature/**"
+permissions:
+  contents: read
+
 jobs:
   prcheck:
     runs-on: ${{ matrix.os }}
diff --git a/.github/workflows/stale-issue.yml b/.github/workflows/stale-issue.yml
index add756523..98dbbc660 100644
--- a/.github/workflows/stale-issue.yml
+++ b/.github/workflows/stale-issue.yml
@@ -4,6 +4,9 @@ on:
   schedule:
     - cron: "*/60 * * * *"
 
+permissions:
+  issues: write
+
 jobs:
   cleanup:
     runs-on: ubuntu-latest