diff --git a/.github/workflows/ocpl_cm_standards_check.yml b/.github/workflows/ocpl_cm_standards_check.yml
new file mode 100644
index 0000000..d4c08d9
--- /dev/null
+++ b/.github/workflows/ocpl_cm_standards_check.yml
@@ -0,0 +1,11 @@
+name: OCPL Configuration Management Standards Check
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize, ready_for_review]
+
+jobs:
+  commitlint_remote:
+    permissions:
+      contents: read
+    uses: nciocpl/.github/.github/workflows/ocpl_cm_standards_check.yml@workflow/v2
diff --git a/.github/workflows/shared-workflow.yml b/.github/workflows/shared-workflow.yml
index 73d3575..40363bb 100644
--- a/.github/workflows/shared-workflow.yml
+++ b/.github/workflows/shared-workflow.yml
@@ -14,5 +14,9 @@ on:
   pull_request:
 jobs:
   react-app-workflow:
+    permissions:
+      contents: read
+      packages: read
+      pull-requests: write
     uses: nciocpl/cgov-react-app-playground/.github/workflows/workflow.yml@workflow/v3
     secrets: inherit