diff --git a/.github/workflows/deploy-delete.yml b/.github/workflows/deploy-delete.yml
index 8117edef..dbd02b91 100644
--- a/.github/workflows/deploy-delete.yml
+++ b/.github/workflows/deploy-delete.yml
@@ -20,6 +20,7 @@ concurrency:
 jobs:
   cloudflare-pages-deploy-delete:
     permissions:
+      actions: read
       contents: read
       deployments: write
       pull-requests: write
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 6db3ded5..721aa57c 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -21,6 +21,7 @@ concurrency:
 jobs:
   cloudflare-pages-deploy:
     permissions:
+      actions: read
       contents: read
       deployments: write
       pull-requests: write