diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 1def0f14..fca0d66f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,6 +11,8 @@ on:
 
 permissions:
   pull-requests: write
+  checks: write
+  contents: read
 
 jobs:
   lint-bash:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d8603ff2..97d6d878 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -10,6 +10,11 @@ on:
       - synchronize
   workflow_dispatch:
 
+permissions:
+  pull-requests: write
+  checks: write
+  contents: read
+
 jobs:
   test-action:
     runs-on: ubuntu-latest