diff --git a/.github/workflows/issue-labeled.yml b/.github/workflows/issue-labeled.yml
index 780fa1a525..e92032adbc 100644
--- a/.github/workflows/issue-labeled.yml
+++ b/.github/workflows/issue-labeled.yml
@@ -4,6 +4,10 @@ on:
   issues:
     types: [labeled]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   reply-labeled:
     if: github.repository == 'module-federation/core'
diff --git a/.github/workflows/pr-label.yaml b/.github/workflows/pr-label.yaml
index 80804665bf..5f428e30f0 100644
--- a/.github/workflows/pr-label.yaml
+++ b/.github/workflows/pr-label.yaml
@@ -6,6 +6,10 @@ on:
       - opened
       - edited
 
+permissions:
+  pull-requests: write
+  contents: read
+
 jobs:
   change-labeling:
     name: Labeling for changes