diff --git a/.github/workflows/deploy_a.yml b/.github/workflows/deploy_a.yml
index 05df7c8..5515b91 100644
--- a/.github/workflows/deploy_a.yml
+++ b/.github/workflows/deploy_a.yml
@@ -7,6 +7,11 @@ on:
     paths:
       - 'model/a/**'
 
+permissions:
+  id-token: write
+  contents: read
+  packages: write
+
 jobs:
   style:
     uses: ./.github/workflows/style.yml
diff --git a/.github/workflows/deploy_b.yml b/.github/workflows/deploy_b.yml
index 850412f..d450710 100644
--- a/.github/workflows/deploy_b.yml
+++ b/.github/workflows/deploy_b.yml
@@ -7,6 +7,11 @@ on:
     paths:
       - 'model/b/**'
 
+permissions:
+  id-token: write
+  contents: read
+  packages: write
+
 jobs:
   style:
     uses: ./.github/workflows/style.yml
diff --git a/.github/workflows/pr_b.yml b/.github/workflows/pr_b.yml
index 52b0caf..794efb9 100644
--- a/.github/workflows/pr_b.yml
+++ b/.github/workflows/pr_b.yml
@@ -7,6 +7,11 @@ on:
     paths:
       - 'model/b/**'
 
+permissions:
+  id-token: write
+  contents: read
+  packages: write
+
 jobs:
   style:
     uses: ./.github/workflows/style.yml