diff --git a/.github/workflows/release-pull-request.yml b/.github/workflows/release-pull-request.yml
index 4248162..c037e88 100644
--- a/.github/workflows/release-pull-request.yml
+++ b/.github/workflows/release-pull-request.yml
@@ -1,5 +1,9 @@
 name: Release Pull Request Automation
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   create:
 jobs:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a67ab03..9eac457 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,6 +7,8 @@ on:
   push:
     branches:
       - develop
+permissions:
+  contents: read
 jobs:
   shellcheck:
     name: Shellcheck