diff --git a/.github/workflows/pr-title.yaml b/.github/workflows/pr-title.yaml
index bcef4216..8a048b6b 100644
--- a/.github/workflows/pr-title.yaml
+++ b/.github/workflows/pr-title.yaml
@@ -7,6 +7,9 @@ on:
       - edited
       - synchronize
 
+permissions:
+  contents: read
+
 jobs:
   main:
     name: Validate PR title
diff --git a/.github/workflows/publish-docs.yaml b/.github/workflows/publish-docs.yaml
index 394cca66..60cd6068 100644
--- a/.github/workflows/publish-docs.yaml
+++ b/.github/workflows/publish-docs.yaml
@@ -16,6 +16,9 @@ on:
 env:
   PYTHON_VERSION: 3.11
 
+permissions:
+  contents: write
+
 jobs:
   build:
     name: Deploy docs