diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml
index 352f65c..b0baa1d 100644
--- a/.github/workflows/build-and-release.yml
+++ b/.github/workflows/build-and-release.yml
@@ -19,6 +19,7 @@ on:
     branches: [main]
 
 permissions:
+  actions: read
   contents: write
   packages: write
   checks: write
diff --git a/.github/workflows/scheduled-test.yml b/.github/workflows/scheduled-test.yml
index bdb5c17..7be4af7 100644
--- a/.github/workflows/scheduled-test.yml
+++ b/.github/workflows/scheduled-test.yml
@@ -8,6 +8,7 @@ on:
 permissions:
   contents: read
   checks: write
+  actions: read
 
 jobs:
   test: