diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index e3c2162..6b029ed 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -1,4 +1,9 @@
 name: Get Lines of Code for GitHub Organizations
+permissions:
+    contents: read
+    issues: read
+    pull-requests: write
+
 on:
   workflow_dispatch:
     inputs:
@@ -56,4 +61,4 @@ jobs:
           IFS=',' read -ra ORGS <<< "${{ github.event.inputs.prod_org_name }}"
           for org in "${ORGS[@]}"; do
             bundle exec ruby loc.rb "$org"
-          done
+          done
\ No newline at end of file
diff --git a/.github/workflows/run.yml b/.github/workflows/run.yml
index 61ff23c..2cafa0a 100644
--- a/.github/workflows/run.yml
+++ b/.github/workflows/run.yml
@@ -1,4 +1,9 @@
 name: run
+permissions:
+    contents: read
+    issues: read
+    pull-requests: write
+
 on:
   push: {}
   workflow_dispatch: