diff --git a/.github/workflows/cockpit-lib-update.yml b/.github/workflows/cockpit-lib-update.yml
index 49d48e5..2f9de38 100644
--- a/.github/workflows/cockpit-lib-update.yml
+++ b/.github/workflows/cockpit-lib-update.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   cockpit-lib-update:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       - name: Set up dependencies
         run: |
diff --git a/.github/workflows/npm-update-pf.yml b/.github/workflows/npm-update-pf.yml
index 8a458bd..e07f20f 100644
--- a/.github/workflows/npm-update-pf.yml
+++ b/.github/workflows/npm-update-pf.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   npm-update:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       - name: Set up dependencies
         run: |
diff --git a/.github/workflows/npm-update.yml b/.github/workflows/npm-update.yml
index 13fe1b2..4b06dee 100644
--- a/.github/workflows/npm-update.yml
+++ b/.github/workflows/npm-update.yml
@@ -7,6 +7,9 @@ on:
 jobs:
   npm-update:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
     steps:
       - name: Set up dependencies
         run: |