diff --git a/.github/workflows/auto-comment.yml b/.github/workflows/auto-comment.yml
index 31e2b3e..f4dff98 100644
--- a/.github/workflows/auto-comment.yml
+++ b/.github/workflows/auto-comment.yml
@@ -3,6 +3,8 @@ name: Auto Responder for New Issues
 on:
   issues:
     types: labeled
+permissions:
+  issues: write
 
 jobs:
   processLabelAction:
diff --git a/.github/workflows/update-project.yml b/.github/workflows/update-project.yml
index 6694587..d429d59 100644
--- a/.github/workflows/update-project.yml
+++ b/.github/workflows/update-project.yml
@@ -12,6 +12,9 @@ env:
   PR_STATUS_DRAFT: 'In Progress'
   PR_STATUS_READY: 'Review/QA'
 
+permissions:
+  pull-requests: write
+
 jobs:
   update-project:
     name: Move project item
diff --git a/.github/workflows/zowe-cli-plugin.yml b/.github/workflows/zowe-cli-plugin.yml
index 6a3f53e..cb33987 100644
--- a/.github/workflows/zowe-cli-plugin.yml
+++ b/.github/workflows/zowe-cli-plugin.yml
@@ -97,7 +97,10 @@ jobs:
     if: github.event_name == 'push' && github.ref_protected
     needs: test
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     steps:
     - name: Checkout
       uses: actions/checkout@v4