diff --git a/.github/workflows/repostats.yaml b/.github/workflows/repostats.yaml
index b5caf00e79..6dec9fb72a 100644
--- a/.github/workflows/repostats.yaml
+++ b/.github/workflows/repostats.yaml
@@ -1,3 +1,5 @@
+name: repo-stats
+
 on:
   schedule:
     # Run this once per day, towards the end of the day for keeping the most
@@ -5,6 +7,9 @@ on:
     - cron: "0 23 * * *"
   workflow_dispatch: # Allow for running this manually.
 
+permissions:
+  contents: none
+
 jobs:
   j1:
     name: repostats-for-weave-gitops
diff --git a/.github/workflows/trigger.yaml b/.github/workflows/trigger.yaml
index eca0957b08..ffeb76f693 100644
--- a/.github/workflows/trigger.yaml
+++ b/.github/workflows/trigger.yaml
@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: none
+
 jobs:
   trigger-enterprise-workflow:
     runs-on: ubuntu-latest