diff --git a/.github/workflows/assign-reviewers.yml b/.github/workflows/assign-reviewers.yml
index 2c9a5133ad2a..3a2d015607f0 100644
--- a/.github/workflows/assign-reviewers.yml
+++ b/.github/workflows/assign-reviewers.yml
@@ -9,6 +9,9 @@ on:
       - 'review_request_removed'
       - 'ready_for_review'
 
+permissions:
+  pull-requests: write
+
 jobs:
   assign:
     name: 'Assignee & Code Reviewers'
diff --git a/.github/workflows/issue-labels.yml b/.github/workflows/issue-labels.yml
index 20d974bd8a9a..13af1251d322 100644
--- a/.github/workflows/issue-labels.yml
+++ b/.github/workflows/issue-labels.yml
@@ -4,6 +4,9 @@ on:
   issues:
     types: [opened, reopened]
 
+permissions:
+  issues: write
+
 jobs:
   # From https://github.com/marketplace/actions/github-script#apply-a-label-to-an-issue.
   add-classify-label: