diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 39b9d774b..43528ed0f 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -10,12 +10,16 @@ on:
 concurrency:
   group: gh-pages
 
+permissions:
+  contents: read
+
 jobs:
   update-docs:
     name: Update gh-pages documentation
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
-
     - name: Install dependencies
       run: |
         sudo apt-get install -y jq curl
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 272a4be52..94298f2b6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,10 +6,15 @@ on:
 concurrency:
   group: gh-pages
 
+permissions:
+  contents: read
+
 jobs:
   update-helm-repo:
     name: Update gh-pages helm repo index
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
     - name: Install Helm
       uses: azure/setup-helm@v4