diff --git a/.github/workflows/deploy-website.yml b/.github/workflows/deploy-website.yml
index cd48935c2..786a980ca 100644
--- a/.github/workflows/deploy-website.yml
+++ b/.github/workflows/deploy-website.yml
@@ -8,6 +8,9 @@ jobs:
   deploy-website:
     name: Deploy website
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      deployments: write
     if: github.repository_owner == 'discordjs'
     steps:
       - name: Checkout repository
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index a3d28b223..4ee59eeea 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -127,9 +127,6 @@ jobs:
     env:
       TURBO_TOKEN: ${{ secrets.TURBO_TOKEN }}
       TURBO_TEAM: ${{ secrets.TURBO_TEAM }}
-    permissions:
-      contents: read
-      deployments: write
     if: github.repository_owner == 'discordjs'
     steps:
       - name: Checkout repository
@@ -157,6 +154,9 @@ jobs:
     needs: build-docs
     name: Deploy website
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      deployments: write
     if: github.repository_owner == 'discordjs'
     steps:
       - name: Checkout repository