diff --git a/.github/workflows/helm-lint.yml b/.github/workflows/helm-lint.yml
index f9ebe1c..0781746 100644
--- a/.github/workflows/helm-lint.yml
+++ b/.github/workflows/helm-lint.yml
@@ -6,6 +6,11 @@ on:
     paths:
       - 'charts/**'
       - '.github/workflows/helm-lint.yml'
+
+permissions:
+  contents: read
+  packages: read
+
 jobs:
   lint:
     runs-on: 'ubuntu-latest'
diff --git a/.github/workflows/helm-test.yml b/.github/workflows/helm-test.yml
index c503102..233d0a6 100644
--- a/.github/workflows/helm-test.yml
+++ b/.github/workflows/helm-test.yml
@@ -8,6 +8,10 @@ on:
       - 'charts/**'
       - '.github/workflows/helm-test.yml'
 
+permissions:
+  contents: read
+  packages: read
+
 env:
   HELM_VERSION: v3.16.2