diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1efd04c..ea172bf 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,8 +1,11 @@
 name: Build and Release (Manual Run) v1.4
 
-on: 
+on:
  workflow_dispatch: # This event allows manual triggering
 
+permissions:
+  contents: write
+
 env:
   THIRD_PARTY_GIT_AUTHOR_EMAIL: opensource+bot@newrelic.com
   THIRD_PARTY_GIT_AUTHOR_NAME: nr-opensource-bot
diff --git a/.github/workflows/repolinter.yml b/.github/workflows/repolinter.yml
index 063e748..29525f3 100644
--- a/.github/workflows/repolinter.yml
+++ b/.github/workflows/repolinter.yml
@@ -8,6 +8,10 @@ name: Repolinter Action
 # filtered in the "Test Default Branch" step.
 on: [push, workflow_dispatch]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   repolint:
     name: Run Repolinter