diff --git a/.github/workflows/check-lib.yml b/.github/workflows/check-lib.yml
index a4e87bd4..c86ef4ff 100644
--- a/.github/workflows/check-lib.yml
+++ b/.github/workflows/check-lib.yml
@@ -5,7 +5,6 @@ jobs:
   check-lib:
     name: Check main.js
     runs-on: ubuntu-latest
-    permissions: read-all
     steps:
     - name: Check out
       uses: actions/checkout@v3
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4102e6f9..11d0280f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,7 +4,6 @@ jobs:
   build_test_job:
     name: 'Build and test job'
     runs-on: ${{ matrix.os }}
-    permissions: read-all
     strategy:
         matrix:
           os: [windows-latest, ubuntu-latest]
diff --git a/.github/workflows/pr-check.yml b/.github/workflows/pr-check.yml
index 1deb2dba..dedd82c8 100644
--- a/.github/workflows/pr-check.yml
+++ b/.github/workflows/pr-check.yml
@@ -17,6 +17,7 @@ jobs:
     environment: Automation test # this environment requires approval before running the action
     runs-on: ${{ matrix.os }}
     permissions:
+      checks: write
       id-token: write
     continue-on-error: true
     strategy:
diff --git a/.github/workflows/run-integration-tests.yml b/.github/workflows/run-integration-tests.yml
index 1c5ac175..8d06df47 100644
--- a/.github/workflows/run-integration-tests.yml
+++ b/.github/workflows/run-integration-tests.yml
@@ -3,7 +3,6 @@ jobs:
   trigger-integration-tests:
     name: Trigger Integration Tests
     runs-on: ubuntu-latest
-    permissions: read-all
     steps:
       - name: Trigger test run
         run: |