diff --git a/.github/workflows/check-binaries.yml b/.github/workflows/check-binaries.yml
index 75fa28f..da8ecf6 100644
--- a/.github/workflows/check-binaries.yml
+++ b/.github/workflows/check-binaries.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   check-for-vulnerabilities:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     outputs:
       report_contents: ${{ steps.save-output.outputs.report_contents }}
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 32e878d..e8805c7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,6 +15,9 @@ jobs:
   Release:
     environment: Release
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      packages: write
     steps:
       - uses: actions/checkout@v4
         with: