diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml
index 6d4596e8bc..be0eb20af2 100644
--- a/.github/workflows/fossa.yml
+++ b/.github/workflows/fossa.yml
@@ -5,13 +5,13 @@ on:
     branches: 
       - main
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
-permissions:
-  contents: read
-
 jobs:
   fossa-scan:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/helm-test.yaml b/.github/workflows/helm-test.yaml
index 578e21aae7..5d02f5b5fe 100644
--- a/.github/workflows/helm-test.yaml
+++ b/.github/workflows/helm-test.yaml
@@ -9,6 +9,8 @@ on:
       - charts/**
       - .github/workflows/helm-test.yaml
 
+permissions: {}
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true