diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 988d2ab725..e89edd1487 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -17,6 +17,7 @@ permissions:
   checks: 'write'
   contents: 'read'
   statuses: 'write'
+  packages: 'read'
 
 defaults:
   run:
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index aa379f9cb9..b68c97595d 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -1,3 +1,7 @@
+permissions:
+  contents: 'read'
+  packages: 'read'
+
 on:
   workflow_call:
     inputs:
diff --git a/.github/workflows/orchestrator.yml b/.github/workflows/orchestrator.yml
index 0ac12c6672..512c6a6ba4 100644
--- a/.github/workflows/orchestrator.yml
+++ b/.github/workflows/orchestrator.yml
@@ -1,5 +1,5 @@
 # .github/workflows/pr-checks.yml
-name: 'PR Checks'
+name: 'Checks'
 
 on:
   pull_request: