diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 25f95ba..12deb15 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,7 +19,6 @@ env:
   DOTNET_VERSION: 9.0.102
 
 permissions:
-  checks: write
   contents: read
 
 jobs:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 42ee6a9..e810d19 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -61,7 +61,7 @@ jobs:
     if: always() && needs.check-changesets.outputs.has-changesets == 'true'
     environment: "Release" # Requires approval from a maintainer
     permissions:
-      contents: write
+      contents: read
     outputs:
       committed: ${{ steps.commit-version-bump.outputs.commit-hash != '' }}
       new-version: ${{ steps.apply-changesets.outputs.new-version }}