diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
index 68a7b31..75e2a22 100644
--- a/.github/workflows/deploy.yaml
+++ b/.github/workflows/deploy.yaml
@@ -1,4 +1,6 @@
 name: Deploy to GitHub Pages
+permissions:
+  contents: write
 on:
   push:
     branches: [ "main", "master" ]
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 5608592..eede140 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -1,5 +1,7 @@
 name: CI
 on:  [workflow_dispatch, pull_request, push]
+permissions:
+  contents: read
 
 jobs:
   test: