diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index da1156c..e62167f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,9 @@ on:
     branches: ["main"]
   pull_request:
     branches: ["main"]
+permissions:
+  contents: read
+  pull-requests: write
 
 env:
   CARGO_TERM_COLOR: always
diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index ca70da0..212b164 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -1,4 +1,8 @@
 on: [push, pull_request]
+name: "CICD"
+permissions:
+  contents: read
+  pull-requests: write
 
 jobs:
   check: