diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b9b971e..c37e420 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,8 @@ jobs:
   create_release:
     name: Create Release
     runs-on: macos-latest
+    permissions:
+      contents: write
     steps:
       - uses: maxim-lobanov/setup-xcode@v1
         with:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 682c497..46ea022 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   test:
     runs-on: macos-latest
+    permissions:
+      contents: read
     steps:
     - uses: maxim-lobanov/setup-xcode@v1
       with: