diff --git a/.github/workflows/gosec.yml b/.github/workflows/gosec.yml
index fee16c4cad..0730c31256 100644
--- a/.github/workflows/gosec.yml
+++ b/.github/workflows/gosec.yml
@@ -7,7 +7,6 @@ on: # yamllint disable-line rule:truthy
 
 permissions:
   security-events: write
-  contents: read
 
 jobs:
   tests:
diff --git a/.github/workflows/pre-commit-auto-update.yml b/.github/workflows/pre-commit-auto-update.yml
index 543ef4ec86..b87d72c770 100644
--- a/.github/workflows/pre-commit-auto-update.yml
+++ b/.github/workflows/pre-commit-auto-update.yml
@@ -4,7 +4,9 @@ on: # yamllint disable-line rule:truthy
   schedule:
     - cron: 0 0 1 * *
 
-permissions: read-all
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   auto-update: