diff --git a/.github/workflows/erdjs-publish-alpha-beta.yml b/.github/workflows/erdjs-publish-alpha-beta.yml
index 525dd3e4..5f9b5a21 100644
--- a/.github/workflows/erdjs-publish-alpha-beta.yml
+++ b/.github/workflows/erdjs-publish-alpha-beta.yml
@@ -10,6 +10,9 @@ on:
         - alpha
         - beta
 
+permissions:
+  contents: write
+
 jobs:
   publish-npm:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/erdjs-publish.yml b/.github/workflows/erdjs-publish.yml
index 57e5b2fc..5a5c149d 100644
--- a/.github/workflows/erdjs-publish.yml
+++ b/.github/workflows/erdjs-publish.yml
@@ -3,6 +3,9 @@ name: Publish erdjs
 on:
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   publish-npm:
     runs-on: ubuntu-latest