diff --git a/.github/workflows/publish-docker.yml b/.github/workflows/publish-docker.yml
index 50cc228..7f7b19f 100644
--- a/.github/workflows/publish-docker.yml
+++ b/.github/workflows/publish-docker.yml
@@ -16,6 +16,9 @@ on:
     paths-ignore:
     - 'docs/**'
     - '**/*.md'
+permissions:
+  contents: read
+  packages: write
 
 jobs:
   buildAndPush:
diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml
index 299ad44..8510e62 100644
--- a/.github/workflows/release-drafter.yml
+++ b/.github/workflows/release-drafter.yml
@@ -6,6 +6,10 @@ on:
     - main
   pull_request:
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   update_release_draft:
     runs-on: ubuntu-latest