diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 60d2ffa..d66c7f6 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -4,6 +4,11 @@ on:
     workflow_dispatch:
     release:
      types: [published]
+
+permissions:
+    contents: read
+    packages: write
+
 jobs:
     build:
         runs-on: ubuntu-latest
diff --git a/.github/workflows/scheduled-build.yml b/.github/workflows/scheduled-build.yml
index a105b87..e718145 100644
--- a/.github/workflows/scheduled-build.yml
+++ b/.github/workflows/scheduled-build.yml
@@ -5,6 +5,10 @@ on:
         - cron: '0 2 * * 0'  # Every Sunday at 02:00 UTC
     workflow_dispatch:
 
+permissions:
+    contents: write
+    packages: write
+
 jobs:
     build:
         runs-on: ubuntu-latest