diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index c38b839..7e61acf 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -11,6 +11,8 @@ permissions:
   contents: write
   pull-requests: write
   statuses: write
+  pages: write
+  id-token: write
 
 jobs:
   CLAAssistant:
diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index 4c6e896..6402a02 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -1,6 +1,10 @@
 ##.github/workflows/release.yml
 name: Website Deployment
 on: workflow_dispatch
+permissions:
+  contents: read
+  pages: write
+  id-token: write
 jobs:
   release:
     runs-on: ubuntu-latest