diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index e87853c..4671350 100755
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -7,6 +7,9 @@ on:
     tags:
       - 'v*'
 
+permissions:
+  contents: write
+
 jobs:
   delivery-nodejs:
     name: Prepare for NPM
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7c36fd9..5524a20 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,6 +4,9 @@ name: ci
 
 on: [ push, pull_request ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest