diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 300be0de..daf1cc42 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -80,11 +80,15 @@ jobs:
   linter:
     name: golangci-lint
     runs-on: [self-hosted, public, linux, x64]
+    permissions:
+      checks: write
+      contents: read
+      pull-requests: write
     steps:
       - name: Check out code into the Go module directory
         uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9  # v3
       - name: golangci-lint
-        uses: reviewdog/action-golangci-lint@79d32f10b2ea0d4cebb755d849b048c4b40c3d50  # v2
+        uses: reviewdog/action-golangci-lint@94d61e3205b61acf4ddabfeb13c5f8a13eb4167b  # v2
         with:
           tool_name: golangci-lint
           fail_on_error: true
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 64f8c672..7a61f7f9 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -29,10 +29,14 @@ jobs:
   linter:
     name: golangci-lint
     runs-on: ubuntu-latest
+    permissions:
+      checks: write
+      contents: read
+      pull-requests: write
     steps:
       - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9  # v3
       - name: golangci-lint
-        uses: reviewdog/action-golangci-lint@79d32f10b2ea0d4cebb755d849b048c4b40c3d50  # v2
+        uses: reviewdog/action-golangci-lint@94d61e3205b61acf4ddabfeb13c5f8a13eb4167b  # v2
         with:
           tool_name: golangci-lint
           fail_on_error: true