diff --git a/.github/workflows/NewYearUpdateCopyright.yml b/.github/workflows/NewYearUpdateCopyright.yml
index 2c4c819c..7c4d53d1 100644
--- a/.github/workflows/NewYearUpdateCopyright.yml
+++ b/.github/workflows/NewYearUpdateCopyright.yml
@@ -5,7 +5,8 @@ on:
     - cron: '0 5 1 1 *'  # Midnight EST on Jan 1 America/New_York
   #workflow_dispatch:
 
-permissions: {}
+permissions:
+  reaf
 
 jobs:
   create-issue:
diff --git a/.github/workflows/stale-branches.yml b/.github/workflows/stale-branches.yml
index 473d7d2c..c0abe98b 100644
--- a/.github/workflows/stale-branches.yml
+++ b/.github/workflows/stale-branches.yml
@@ -3,9 +3,10 @@ name: stale-branches.yml – Delete Stale Branches
 on:
   #workflow_dispatch:  # Manual trigger from GitHub UI
   schedule:
-    - cron: '0 6 * * 0'
+    - cron: '0 2 * * 0'
 
-permissions: {}
+permissions:
+  read
 
 jobs:
   stale_branches: