diff --git a/.github/workflows/bump_bbs_protos.yml b/.github/workflows/bump_bbs_protos.yml
index 3dcb284ba16..4f2cd4476f5 100644
--- a/.github/workflows/bump_bbs_protos.yml
+++ b/.github/workflows/bump_bbs_protos.yml
@@ -8,7 +8,9 @@ on:
 jobs:
   update-protos:
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - uses: hmarr/debug-action@v3
       - name: Checkout ccng
diff --git a/.github/workflows/deploy_v3_docs.yml b/.github/workflows/deploy_v3_docs.yml
index fae965c735b..a4d70f65d38 100644
--- a/.github/workflows/deploy_v3_docs.yml
+++ b/.github/workflows/deploy_v3_docs.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   dummy:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - name: Dummy Step
         run: echo "This is a dummy action to ensure visibility"
\ No newline at end of file