diff --git a/.github/workflows/build-container.yml b/.github/workflows/build-container.yml
index 0fabbdf038..67c63b4b4b 100644
--- a/.github/workflows/build-container.yml
+++ b/.github/workflows/build-container.yml
@@ -16,6 +16,9 @@ on:
       - 'v*.*.*'
   workflow_dispatch:
 
+permissions:
+  contents: write
+
 jobs:
   docker:
     if: github.event.pull_request.draft == false
diff --git a/.github/workflows/mkdocs-material.yml b/.github/workflows/mkdocs-material.yml
index f8f58a6b0c..c8e55f0b1b 100644
--- a/.github/workflows/mkdocs-material.yml
+++ b/.github/workflows/mkdocs-material.yml
@@ -5,6 +5,9 @@ on:
       - 'main'
       - 'development'
 
+permissions:
+    contents: write
+
 jobs:
   mkdocs-material:
     if: github.event.pull_request.draft == false
@@ -34,8 +37,6 @@ jobs:
 
       - name: deploy to gh-pages
         if: ${{ github.ref == 'refs/heads/main' }}
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
         run: |
           python -m \
             mkdocs gh-deploy \