diff --git a/.github/workflows/create-branch.yml b/.github/workflows/create-branch.yml
index 9ea30712..75c3224d 100644
--- a/.github/workflows/create-branch.yml
+++ b/.github/workflows/create-branch.yml
@@ -20,6 +20,9 @@ jobs:
     strategy:
       fail-fast: false
 
+    permissions:
+      contents: write
+
     steps:
       - uses: "actions/checkout@v4"
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 274490d9..c9505f82 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -146,6 +146,9 @@ jobs:
       - "publish-python-bindings"
       - "publish-ruby-bindings"
 
+    permissions:
+      contents: write
+
     steps:
       - name: "Create release on GitHub"
         uses: "actions/github-script@v7"