diff --git a/.github/workflows/cargo-bloat.yml b/.github/workflows/cargo-bloat.yml
index 1b49bd5..3cf3036 100644
--- a/.github/workflows/cargo-bloat.yml
+++ b/.github/workflows/cargo-bloat.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-bloat
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cargo-expand.yml b/.github/workflows/cargo-expand.yml
index 950e894..7254115 100644
--- a/.github/workflows/cargo-expand.yml
+++ b/.github/workflows/cargo-expand.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-expand
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cargo-fuzz.yml b/.github/workflows/cargo-fuzz.yml
index f8e9b55..55b70b3 100644
--- a/.github/workflows/cargo-fuzz.yml
+++ b/.github/workflows/cargo-fuzz.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-fuzz
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cargo-llvm-lines.yml b/.github/workflows/cargo-llvm-lines.yml
index ece1697..8a593a8 100644
--- a/.github/workflows/cargo-llvm-lines.yml
+++ b/.github/workflows/cargo-llvm-lines.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-llvm-lines
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cargo-outdated.yml b/.github/workflows/cargo-outdated.yml
index cc4fdd4..3f9c32c 100644
--- a/.github/workflows/cargo-outdated.yml
+++ b/.github/workflows/cargo-outdated.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-outdated
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cargo-rm.yml b/.github/workflows/cargo-rm.yml
index 45bf2f2..2f8e0b2 100644
--- a/.github/workflows/cargo-rm.yml
+++ b/.github/workflows/cargo-rm.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-rm
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cargo-tally.yml b/.github/workflows/cargo-tally.yml
index 6db9285..b262ab3 100644
--- a/.github/workflows/cargo-tally.yml
+++ b/.github/workflows/cargo-tally.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: cargo-tally
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/cxxbridge-cmd.yml b/.github/workflows/cxxbridge-cmd.yml
index 361a1a6..e08ea58 100644
--- a/.github/workflows/cxxbridge-cmd.yml
+++ b/.github/workflows/cxxbridge-cmd.yml
@@ -11,5 +11,7 @@ jobs:
     with:
       crate: cxxbridge-cmd
       bin: cxxbridge
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/faketty.yml b/.github/workflows/faketty.yml
index f69eaa3..3b8218e 100644
--- a/.github/workflows/faketty.yml
+++ b/.github/workflows/faketty.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: faketty
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/sha1dir.yml b/.github/workflows/sha1dir.yml
index 367d693..30c3432 100644
--- a/.github/workflows/sha1dir.yml
+++ b/.github/workflows/sha1dir.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: sha1dir
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}
diff --git a/.github/workflows/star-history.yml b/.github/workflows/star-history.yml
index 0d0138f..d9be140 100644
--- a/.github/workflows/star-history.yml
+++ b/.github/workflows/star-history.yml
@@ -10,5 +10,7 @@ jobs:
     uses: dtolnay/install/.github/workflows/build.yml@master
     with:
       crate: star-history
+    permissions:
+      contents: write
     secrets:
       private_key: ${{secrets.private_key}}