diff --git a/workflows/daily-backlog-burner.md b/workflows/daily-backlog-burner.md
index de7ec67..9b15e9b 100644
--- a/workflows/daily-backlog-burner.md
+++ b/workflows/daily-backlog-burner.md
@@ -14,6 +14,14 @@ timeout-minutes: 30
 
 network: defaults
 
+permissions:
+  actions: read
+  contents: read
+  discussions: read
+  issues: read
+  pull-requests: read
+  security-events: read
+
 safe-outputs:
   create-discussion:
     title-prefix: "${{ github.workflow }}"
diff --git a/workflows/daily-progress.md b/workflows/daily-progress.md
index 6eb8dc9..d24f9e4 100644
--- a/workflows/daily-progress.md
+++ b/workflows/daily-progress.md
@@ -14,6 +14,14 @@ timeout-minutes: 30
 
 network: defaults
 
+permissions:
+  actions: read
+  contents: read
+  discussions: read
+  issues: read
+  pull-requests: read
+  security-events: read
+
 safe-outputs:
   create-discussion:
     title-prefix: "${{ github.workflow }}"