diff --git a/.github/workflows/draft.yaml b/.github/workflows/draft.yaml
index 423582b6..75d5ef38 100644
--- a/.github/workflows/draft.yaml
+++ b/.github/workflows/draft.yaml
@@ -8,6 +8,10 @@ on:
 jobs:
   update-draft:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+
     steps:
       # Drafts your next Release notes as Pull Requests are merged into "main"
       - uses: release-drafter/release-drafter@v5
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 2c550693..da44be59 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -9,6 +9,9 @@ jobs:
 
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: write
+
     steps:
     - uses: actions/checkout@v4