diff --git a/.github/workflows/auto-release-helm-chart.yml b/.github/workflows/auto-release-helm-chart.yml
index d32d796ee..8972f3600 100644
--- a/.github/workflows/auto-release-helm-chart.yml
+++ b/.github/workflows/auto-release-helm-chart.yml
@@ -10,6 +10,10 @@ on:
 
   workflow_dispatch: # Use for manaully trigger to debug
 
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   release-helm-chart:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/bump-k8s-dep.yml b/.github/workflows/bump-k8s-dep.yml
index 502391274..3378db6c9 100644
--- a/.github/workflows/bump-k8s-dep.yml
+++ b/.github/workflows/bump-k8s-dep.yml
@@ -6,6 +6,9 @@ on:
 
   workflow_dispatch: # Use for manaully trigger to debug
 
+permissions:
+  contents: write
+
 jobs:
   bump-k8s-dep-to-latest-pre-release:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/bump-test-k8s-dep.yml b/.github/workflows/bump-test-k8s-dep.yml
index 0dc3b0a4e..8e57ba098 100644
--- a/.github/workflows/bump-test-k8s-dep.yml
+++ b/.github/workflows/bump-test-k8s-dep.yml
@@ -6,6 +6,9 @@ on:
 
   workflow_dispatch: # Use for manaully trigger to debug
 
+permissions:
+  contents: write
+
 jobs:
   bump-test-k8s-dep-to-latest-pre-release:
     runs-on: ubuntu-latest