diff --git a/.github/workflows/build-test-mac.yml b/.github/workflows/build-test-mac.yml
index 6a0e910024..f91f7497cf 100644
--- a/.github/workflows/build-test-mac.yml
+++ b/.github/workflows/build-test-mac.yml
@@ -8,6 +8,9 @@ on:
 env:
   NODE_OPTIONS: --max-old-space-size=8096
 
+permissions:
+  contents: read
+
 jobs:
   build-and-test:
     runs-on: macos-latest-xlarge
diff --git a/.github/workflows/closed-issue-message.yml b/.github/workflows/closed-issue-message.yml
index 8cb2db494c..7a792941c8 100644
--- a/.github/workflows/closed-issue-message.yml
+++ b/.github/workflows/closed-issue-message.yml
@@ -2,6 +2,9 @@ name: Closed Issue Message
 on:
   issues:
     types: [closed]
+permissions:
+  issues: write
+
 jobs:
   auto_comment:
     runs-on: ubuntu-latest