diff --git a/.github/workflows/ocpl_cm_standards_check.yml b/.github/workflows/ocpl_cm_standards_check.yml
index cb9135f..d4c08d9 100644
--- a/.github/workflows/ocpl_cm_standards_check.yml
+++ b/.github/workflows/ocpl_cm_standards_check.yml
@@ -6,4 +6,6 @@ on:
 
 jobs:
   commitlint_remote:
-    uses: nciocpl/.github/.github/workflows/ocpl_cm_standards_check.yml@workflow/v1
\ No newline at end of file
+    permissions:
+      contents: read
+    uses: nciocpl/.github/.github/workflows/ocpl_cm_standards_check.yml@workflow/v2
diff --git a/.github/workflows/workflow.yml b/.github/workflows/workflow.yml
index 15d0077..f2b1539 100644
--- a/.github/workflows/workflow.yml
+++ b/.github/workflows/workflow.yml
@@ -14,5 +14,9 @@ on:
   pull_request:
 jobs:
   react-app-workflow:
+    permissions:
+      contents: read
+      packages: read
+      pull-requests: write
     uses: nciocpl/cgov-react-app-playground/.github/workflows/workflow.yml@workflow/v3
     secrets: inherit