diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
index 7852c5d883..70280e7716 100644
--- a/.github/workflows/backport.yml
+++ b/.github/workflows/backport.yml
@@ -15,6 +15,8 @@ jobs:
       contents: write # required for pushing branches
       pull-requests: write # required for creating pull requests
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # required for pushing changes
     steps:
       - run: |
           if [[ ! $GITHUB_REF_NAME =~ ^release/v[0-9]+\.[0-9]+\.x-0\.[0-9]+bx$ ]]; then
diff --git a/.github/workflows/package-prepare-patch-release.yml b/.github/workflows/package-prepare-patch-release.yml
index 3aba3dc60a..523f767c7a 100644
--- a/.github/workflows/package-prepare-patch-release.yml
+++ b/.github/workflows/package-prepare-patch-release.yml
@@ -23,6 +23,8 @@ jobs:
       contents: write # required for pushing branches
       pull-requests: write # required for creating pull requests
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # required for pushing changes
     steps:
       - uses: actions/checkout@v4
 
diff --git a/.github/workflows/package-release.yml b/.github/workflows/package-release.yml
index 3a9705b09b..0a2c81517a 100644
--- a/.github/workflows/package-release.yml
+++ b/.github/workflows/package-release.yml
@@ -22,6 +22,8 @@ jobs:
       contents: write # required for creating releases
       pull-requests: write # required for creating pull requests
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # required for pushing changes
     steps:
       - run: |
           if [[ $GITHUB_REF_NAME != package-release/${{ inputs.package }}* ]]; then
diff --git a/.github/workflows/prepare-patch-release.yml b/.github/workflows/prepare-patch-release.yml
index 577fc86ba4..f7297a5c49 100644
--- a/.github/workflows/prepare-patch-release.yml
+++ b/.github/workflows/prepare-patch-release.yml
@@ -11,6 +11,8 @@ jobs:
       contents: write # required for pushing branches
       pull-requests: write # required for creating and editing pull requests
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # required for pushing changes
     steps:
       - uses: actions/checkout@v4