diff --git a/.github/workflows/announce-new-release-discord.yml b/.github/workflows/announce-new-release-discord.yml
index 0c11856..91e7d4e 100644
--- a/.github/workflows/announce-new-release-discord.yml
+++ b/.github/workflows/announce-new-release-discord.yml
@@ -4,6 +4,7 @@ on:
   release:
     types:
       - "published"
+permissions: {}
 jobs:
   main:
     name: "Main"
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index 9fed0bf..f81f1b7 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -8,6 +8,7 @@ on:
       - ".github/labels.yml"
   workflow_dispatch:
 permissions:
+  contents: "read"
   issues: "write"
   pull-requests: "write"
 jobs: