diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index e73f8f6035..bfb12ace1a 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -11,6 +11,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     permissions:
+      contents: write # required for pushing changes
       id-token: write
     steps:
       # The logic below handles the npm publication:
diff --git a/.github/workflows/update-otel-deps.yaml b/.github/workflows/update-otel-deps.yaml
index f64178ba84..45d061ca01 100644
--- a/.github/workflows/update-otel-deps.yaml
+++ b/.github/workflows/update-otel-deps.yaml
@@ -9,6 +9,8 @@ permissions:
 jobs:
   create-or-update-deps-pr:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write # required for pushing changes
     steps:
       - name: Fork
         run: gh repo fork open-telemetry/opentelemetry-js-contrib