diff --git a/.github/workflows/spellcheck.yml b/.github/workflows/spellcheck.yml
index 989149a5..89cda0eb 100644
--- a/.github/workflows/spellcheck.yml
+++ b/.github/workflows/spellcheck.yml
@@ -1,9 +1,14 @@
-name: spellcheck
+name: Spellcheck
 on:
   pull_request:
+
 jobs:
   check-spelling:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      checks: write
+
     steps:
       - name: Checkout
         uses: actions/checkout@v6
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index d1980285..0f583fee 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -17,6 +17,10 @@ jobs:
   predis:
     name: PHP ${{ matrix.php }} (Redis ${{ matrix.redis }})
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      statuses: write
+      pull-requests: write
 
     strategy:
       fail-fast: false
@@ -216,6 +220,11 @@ jobs:
     needs: predis
     if: ${{ always() }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      statuses: write
+      pull-requests: write
+
     steps:
       - name: Coveralls Finished
         uses: coverallsapp/github-action@v2