diff --git a/.github/workflows/closed-issue-message.yml b/.github/workflows/closed-issue-message.yml
index 3340afb..22bf2a7 100644
--- a/.github/workflows/closed-issue-message.yml
+++ b/.github/workflows/closed-issue-message.yml
@@ -5,6 +5,8 @@ on:
 jobs:
     auto_comment:
         runs-on: ubuntu-latest
+        permissions:
+          issues: write
         steps:
         - uses: aws-actions/closed-issue-message@v1
           with:
diff --git a/.github/workflows/stale_issue.yml b/.github/workflows/stale_issue.yml
index 8c50bb7..804c1f0 100644
--- a/.github/workflows/stale_issue.yml
+++ b/.github/workflows/stale_issue.yml
@@ -9,6 +9,9 @@ jobs:
   cleanup:
     runs-on: ubuntu-latest
     name: Stale issue job
+    permissions:
+      issues: write
+      pull-requests: write
     steps:
     - uses: aws-actions/stale-issue-cleanup@v3
       with: