diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 9b97bb7..0d1c418 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -18,6 +18,11 @@ on:
 
 jobs:
   claude-review:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
+      id-token: write
     uses: PitziLabs/shared-workflows/.github/workflows/claude-review.yml@main
     secrets: inherit
     with:
diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index f7cfac7..3e9524c 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -20,6 +20,12 @@ on:
 
 jobs:
   claude:
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      id-token: write
+      actions: read
     uses: PitziLabs/shared-workflows/.github/workflows/claude-responder.yml@main
     secrets: inherit
     with: