diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 6f34bf6..a7b2efe 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -139,6 +139,7 @@ jobs:
     permissions:
       contents: read
       id-token: write
+      actions: read
     env:
       GHA_HELM_DEPLOY_ENVIRONMENT: ${{ inputs.environment }}
       GHA_HELM_DEPLOY_IMAGE: ${{ inputs.image }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index b644cb8..c6fd834 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -27,6 +27,7 @@ jobs:
     name: Helm lint
     permissions:
       contents: read
+      actions: read
     steps:
       - uses: actions/checkout@v6
       - uses: entur/gha-helm/.github/actions/helm-lint@v1