diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index c6093f271..868268325 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -4,6 +4,9 @@ on:
   pull_request:
     branches: [main]
 
+# No permissions are required for this workflow
+permissions: {}
+
 env:
   HUSKY_SKIP: true
 
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index a6421a670..b6ab6f6b9 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -4,6 +4,9 @@ on:
   push:
     branches: [main]
 
+permissions:
+  contents: write
+
 env:
   HUSKY_SKIP: true