diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d03f732c..92538cd9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,13 @@ on: pull_request
 
 jobs:
   build:
+    permissions:
+      statuses: write
+      pull-requests: read
+      discussions: write
+      issues: write
+      contents: read
+
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/danger.yml b/.github/workflows/danger.yml
index eb983e0d..ba428ab6 100644
--- a/.github/workflows/danger.yml
+++ b/.github/workflows/danger.yml
@@ -4,6 +4,22 @@ on: [pull_request]
 
 jobs:
   build:
+    permissions:
+      actions: write
+      attestations: write
+      checks: write
+      contents: write
+      deployments: write
+      id-token: write
+      issues: write
+      discussions: write
+      packages: write
+      pages: write
+      pull-requests: write
+      repository-projects: write
+      security-events: write
+      statuses: write
+
     runs-on: ubuntu-latest
     name: "Run Danger"
     steps: