diff --git a/.gitea/workflows/release-nightly.yml b/.gitea/workflows/release-nightly.yml
index 89b69bd..750d284 100644
--- a/.gitea/workflows/release-nightly.yml
+++ b/.gitea/workflows/release-nightly.yml
@@ -10,6 +10,10 @@ env:
   GONOSUMCHECK: git.lethalbits.com/*
   GOINSECURE: git.lethalbits.com/*
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   publish-nightly:
     runs-on: ubuntu-latest
diff --git a/.gitea/workflows/release-tag.yml b/.gitea/workflows/release-tag.yml
index 07fd0c8..4fb97c2 100644
--- a/.gitea/workflows/release-tag.yml
+++ b/.gitea/workflows/release-tag.yml
@@ -10,6 +10,10 @@ env:
   GONOSUMCHECK: git.lethalbits.com/*
   GOINSECURE: git.lethalbits.com/*
 
+permissions:
+  contents: write
+  packages: write
+
 jobs:
   goreleaser:
     runs-on: ubuntu-latest