diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index ae5843b..6b2df1c 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -7,6 +7,11 @@ on:
       - main
   pull_request:
 
+permissions:
+  contents: read
+  packages: read
+  statuses: write
+
 jobs:
   lint:
     name: Lint code base
diff --git a/.github/workflows/releasetracker.yml b/.github/workflows/releasetracker.yml
index 4c86869..acfe62e 100644
--- a/.github/workflows/releasetracker.yml
+++ b/.github/workflows/releasetracker.yml
@@ -6,6 +6,9 @@ on:
     tags:
       - v[0-9]+.[0-9]+.[0-9]+
 
+permissions:
+  contents: write
+
 jobs:
   update-release-tags:
     name: Update release tags