diff --git a/.github/workflows/fork-pr-notice.yml b/.github/workflows/fork-pr-notice.yml
index c202123aab..2b0431003a 100644
--- a/.github/workflows/fork-pr-notice.yml
+++ b/.github/workflows/fork-pr-notice.yml
@@ -12,6 +12,9 @@ permissions: {}
 jobs:
   welcome:
     runs-on: ubuntu-latest
+    permissions:
+      # Require to comment the PR.
+      pull-requests: write
     name: Welcome comment
     # Only display it if base repo (upstream) is different from HEAD repo (possibly a fork)
     if: github.event.pull_request.base.repo.full_name != github.event.pull_request.head.repo.full_name
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
index 9ad9dd7167..d90cf07e50 100644
--- a/.github/workflows/pull_request.yml
+++ b/.github/workflows/pull_request.yml
@@ -54,6 +54,9 @@ jobs:
   close-if-fork-develop:
     name: Forbid develop branch fork contributions
     runs-on: ubuntu-latest
+    permissions:
+      # Require to comment and close the PR.
+      pull-requests: write
     if: >
       github.event.action == 'opened' &&
       github.event.pull_request.head.ref == 'develop' &&