diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index ff0fb5c..78578b3 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -4,6 +4,9 @@ on:
 
 jobs:
   triage:
+    permissions:
+        contents: read
+        pull-requests: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/labeler@v5
diff --git a/.github/workflows/size-label.yml b/.github/workflows/size-label.yml
index 98037c6..86cac42 100644
--- a/.github/workflows/size-label.yml
+++ b/.github/workflows/size-label.yml
@@ -2,6 +2,9 @@ name: size-label
 on: pull_request
 jobs:
   size-label:
+    permissions:
+        contents: read
+        pull-requests: write
     runs-on: ubuntu-latest
     steps:
       - name: size-label