diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 19804bfd3..e9ef3cdd9 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -1,5 +1,9 @@
 name: Generate and publish docs
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/swift.yaml b/.github/workflows/swift.yaml
index 416c83858..26c69472a 100644
--- a/.github/workflows/swift.yaml
+++ b/.github/workflows/swift.yaml
@@ -1,5 +1,9 @@
 name: Swift CI
 
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   push:
     branches: