diff --git a/.github/workflows/watch-breakingchange-crossversion.yaml b/.github/workflows/watch-breakingchange-crossversion.yaml
index 69e4c50eacc0..2b12bdeb5032 100644
--- a/.github/workflows/watch-breakingchange-crossversion.yaml
+++ b/.github/workflows/watch-breakingchange-crossversion.yaml
@@ -13,6 +13,7 @@ on:
       - "\\[TEST-IGNORE\\] Breaking Change(Cross-Version) - Set Status"
 
 permissions:
+  actions: read
   checks: read
   contents: read
 
diff --git a/.github/workflows/watch-breakingchange.yaml b/.github/workflows/watch-breakingchange.yaml
index 9c14cbe57cb2..0794842e53b5 100644
--- a/.github/workflows/watch-breakingchange.yaml
+++ b/.github/workflows/watch-breakingchange.yaml
@@ -13,6 +13,7 @@ on:
       - "\\[TEST-IGNORE\\] Swagger BreakingChange - Set Status"
 
 permissions:
+  actions: read
   checks: read
   contents: read
 
diff --git a/.github/workflows/watch-modelvalidation.yaml b/.github/workflows/watch-modelvalidation.yaml
index a5d13ce232c6..577b7fb8a3f7 100644
--- a/.github/workflows/watch-modelvalidation.yaml
+++ b/.github/workflows/watch-modelvalidation.yaml
@@ -13,6 +13,7 @@ on:
       - "\\[TEST-IGNORE\\] Swagger ModelValidation"
 
 permissions:
+  actions: read
   checks: read
   contents: read
 
diff --git a/.github/workflows/watch-semanticvalidation.yaml b/.github/workflows/watch-semanticvalidation.yaml
index cba8cce1ead1..80dc315e8716 100644
--- a/.github/workflows/watch-semanticvalidation.yaml
+++ b/.github/workflows/watch-semanticvalidation.yaml
@@ -13,6 +13,7 @@ on:
       - "\\[TEST-IGNORE\\] Swagger SemanticValidation"
 
 permissions:
+  actions: read
   checks: read
   contents: read