diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c2edcd0..cbbd8c5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -16,9 +16,10 @@ env:
   DOTNET_ROLL_FORWARD: LatestMajor
 
 permissions:
-  contents: read
+  contents: write
   pages: write
   id-token: write
+  security-events: write
 
 jobs:
   ci:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ffb6e36..e3fdc73 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,7 @@ env:
   DOTNET_ROLL_FORWARD: LatestMajor
 
 permissions:
-  contents: read
+  contents: write
   pages: write
   id-token: write