diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 561221ec4..2687d026b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,7 @@
 name: Policy Test
 
+permissions: {}
+
 on:
   push:
     branches:
@@ -9,6 +11,10 @@ on:
       - main
       - release*
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 1dae4387d..2d9e160ad 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,5 +1,7 @@
 name: Kuttl Tests
 
+permissions: {}
+
 on:
   workflow_dispatch: {}
   pull_request: