diff --git a/.github/workflows/checkpatch-pr.yml b/.github/workflows/checkpatch-pr.yml
index a7e334c..687b1ce 100644
--- a/.github/workflows/checkpatch-pr.yml
+++ b/.github/workflows/checkpatch-pr.yml
@@ -1,9 +1,14 @@
 name: checkpatch review
 on: [pull_request]
+
+permissions: read-all
+
 jobs:
   my_review:
     name: checkpatch review
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
     - name: 'Calculate PR commits + 1'
       run: echo "PR_FETCH_DEPTH=$(( ${{ github.event.pull_request.commits }} + 1 ))" >> $GITHUB_ENV
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e066918..d65142c 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -5,7 +5,7 @@ on:
         schedule:
                 - cron: '30 1 * * *' #every day at 1:30am
 
-permissions: {}
+permissions: read-all
 
 jobs:
         Ubuntu-2404-dkms: