diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
index 92df58768..3504cd4a3 100644
--- a/.github/workflows/claude.yml
+++ b/.github/workflows/claude.yml
@@ -10,6 +10,13 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions:
+  contents: read
+  pull-requests: read
+  issues: read
+  id-token: write
+  actions: read
+
 jobs:
   claude:
     uses: OpenSwiftUIProject/github-workflows/.github/workflows/claude.yml@main
diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml
index dad6b6402..9a193e9e7 100644
--- a/.github/workflows/issue-triage.yml
+++ b/.github/workflows/issue-triage.yml
@@ -4,6 +4,10 @@ on:
   issues:
     types: [opened]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   triage-issue:
     uses: OpenSwiftUIProject/github-workflows/.github/workflows/issue-triage.yml@main
diff --git a/.github/workflows/pr-triage.yml b/.github/workflows/pr-triage.yml
new file mode 100644
index 000000000..9036e49e0
--- /dev/null
+++ b/.github/workflows/pr-triage.yml
@@ -0,0 +1,14 @@
+name: PR Triage
+
+on:
+  pull_request:
+    types: [opened]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  triage-pr:
+    uses: OpenSwiftUIProject/github-workflows/.github/workflows/pr-triage.yml@main
+    secrets: inherit