diff --git a/.github/workflows/assign_reviewers.yml b/.github/workflows/assign_reviewers.yml
index 33bd9e778..f104d52d6 100644
--- a/.github/workflows/assign_reviewers.yml
+++ b/.github/workflows/assign_reviewers.yml
@@ -15,6 +15,8 @@ on:
 jobs:
   requested-reviewer:
     runs-on: ubuntu-latest
+    permissions:
+      issues: write
     steps:
       - name: Assign requested reviewer
         uses: actions/github-script@v7
diff --git a/.github/workflows/conventional-label.yml b/.github/workflows/conventional-label.yml
index 64289d987..fcd927e5c 100644
--- a/.github/workflows/conventional-label.yml
+++ b/.github/workflows/conventional-label.yml
@@ -7,6 +7,8 @@ name: conventional-release-labels
 jobs:
   label:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - uses: bcoe/conventional-release-labels@v1
         with: