diff --git a/.github/workflows/keepalive.yml b/.github/workflows/keepalive.yml
index f876fa94..585046d6 100644
--- a/.github/workflows/keepalive.yml
+++ b/.github/workflows/keepalive.yml
@@ -9,12 +9,13 @@ concurrency:
   group: keepalive
   cancel-in-progress: false
 
+permissions:
+  actions: write
+
 jobs:
   keepalive:
     name: Keep Workflows Alive on Ubuntu 24.04
     runs-on: ubuntu-24.04
-    permissions:
-      actions: write
     steps:
       - name: Re-enable Workflows
         env:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 46590daa..070833fe 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -9,13 +9,13 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: PHPUnit ${{ matrix.phpunit-version }} on PHP ${{ matrix.php-version }} (Ubuntu 24.04)
     runs-on: ubuntu-24.04
-    permissions:
-      contents: read
-      id-token: write
     strategy:
       matrix:
         php-version: