diff --git a/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml b/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml
index f10fac1..2063525 100644
--- a/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml
+++ b/.github/workflows/azure-static-web-apps-agreeable-mud-0b27ba210.yml
@@ -1,5 +1,9 @@
 name: Azure Static Web Apps CI/CD
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   workflow_dispatch:
   push:
diff --git a/.github/workflows/github-pages.yml b/.github/workflows/github-pages.yml
index 8822880..ee4731e 100644
--- a/.github/workflows/github-pages.yml
+++ b/.github/workflows/github-pages.yml
@@ -8,6 +8,8 @@ on:
 jobs:
   deploy-to-github-pages:
 
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps: