diff --git a/.github/workflows/publish-smoke-test-grpc-images.yml b/.github/workflows/publish-smoke-test-grpc-images.yml
index 3aec55b2ac57..ce21d6f484db 100644
--- a/.github/workflows/publish-smoke-test-grpc-images.yml
+++ b/.github/workflows/publish-smoke-test-grpc-images.yml
@@ -15,6 +15,7 @@ permissions:
 jobs:
   publish:
     permissions:
+      contents: read
       packages: write
     uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
     with:
diff --git a/.github/workflows/publish-smoke-test-play-images.yml b/.github/workflows/publish-smoke-test-play-images.yml
index 35c8a32dc006..b7827ce18d2c 100644
--- a/.github/workflows/publish-smoke-test-play-images.yml
+++ b/.github/workflows/publish-smoke-test-play-images.yml
@@ -15,6 +15,7 @@ permissions:
 jobs:
   publish:
     permissions:
+      contents: read
       packages: write
     uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
     with:
diff --git a/.github/workflows/publish-smoke-test-quarkus-images.yml b/.github/workflows/publish-smoke-test-quarkus-images.yml
index e7bfb07792ae..a2ebdb363be2 100644
--- a/.github/workflows/publish-smoke-test-quarkus-images.yml
+++ b/.github/workflows/publish-smoke-test-quarkus-images.yml
@@ -15,6 +15,7 @@ permissions:
 jobs:
   publish:
     permissions:
+      contents: read
       packages: write
     uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
     with:
diff --git a/.github/workflows/publish-smoke-test-security-manager-images.yml b/.github/workflows/publish-smoke-test-security-manager-images.yml
index 9c335bcf30f1..75cd5766ba1a 100644
--- a/.github/workflows/publish-smoke-test-security-manager-images.yml
+++ b/.github/workflows/publish-smoke-test-security-manager-images.yml
@@ -15,6 +15,7 @@ permissions:
 jobs:
   publish:
     permissions:
+      contents: read
       packages: write
     uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
     with:
diff --git a/.github/workflows/publish-smoke-test-spring-boot-images.yml b/.github/workflows/publish-smoke-test-spring-boot-images.yml
index 96a8ad4ec90b..16644429f210 100644
--- a/.github/workflows/publish-smoke-test-spring-boot-images.yml
+++ b/.github/workflows/publish-smoke-test-spring-boot-images.yml
@@ -15,6 +15,7 @@ permissions:
 jobs:
   publish:
     permissions:
+      contents: read
       packages: write
     uses: ./.github/workflows/reusable-publish-smoke-test-images.yml
     with:
diff --git a/.github/workflows/reusable-workflow-notification.yml b/.github/workflows/reusable-workflow-notification.yml
index f337f8d15269..09fee682bcbc 100644
--- a/.github/workflows/reusable-workflow-notification.yml
+++ b/.github/workflows/reusable-workflow-notification.yml
@@ -9,6 +9,9 @@ on:
         type: boolean
         required: true
 
+permissions:
+  issues: write
+
 jobs:
   workflow-notification:
     runs-on: ubuntu-latest