diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 777b5ebd..b7516c4f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -7,6 +7,10 @@ on:
   pull_request:
     branches: ['**']
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
 
   build:
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 55934c1c..528fa562 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -6,6 +6,7 @@ on:
 
 permissions:
   contents: read
+  pull-requests: read
 
 jobs:
   format: