diff --git a/.github/workflows/terraform.lint.yaml b/.github/workflows/terraform.lint.yaml
index f84782c..b4d28bd 100644
--- a/.github/workflows/terraform.lint.yaml
+++ b/.github/workflows/terraform.lint.yaml
@@ -4,6 +4,9 @@ on:
   pull_request:
     paths: ["**.tf"]
 
+permissions:
+  pull-requests: write
+
 jobs:
   terraform-module-k3s:
     name: Terraform module
diff --git a/.github/workflows/terraform.plan.yaml b/.github/workflows/terraform.plan.yaml
index 6c3ecef..5130362 100644
--- a/.github/workflows/terraform.plan.yaml
+++ b/.github/workflows/terraform.plan.yaml
@@ -4,6 +4,9 @@ on:
   pull_request:
     types: [labeled]
 
+permissions:
+  pull-requests: write
+
 jobs:
   examples_hcloud-k3s:
     name: Hetzner Cloud