diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 99efd0a..ec4a9b2 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,9 @@ on:
         type: string
 env:
   NEW_VERSION: ${{ github.event.inputs.release_tag }}
+permissions:
+  contents: write
+
 jobs:
   release:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 246cbb5..4231e01 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+
 jobs:
   code-test:
     name: Test in ${{ matrix.testMode }}