diff --git a/.github/workflows/TestAndPublish.yml b/.github/workflows/TestAndPublish.yml
index e814433..b886053 100644
--- a/.github/workflows/TestAndPublish.yml
+++ b/.github/workflows/TestAndPublish.yml
@@ -12,6 +12,9 @@ jobs:
     
     TestUnity3d:
       uses: ./.github/workflows/TestUnity3d.yml
+      permissions:
+        contents: read
+        checks: write
     
     PublishNugetPackage:
       needs: [TestCommon, TestUnity3d]
@@ -19,4 +22,6 @@ jobs:
     
     PublishUnity3dPackage:
       needs: [PublishNugetPackage]
-      uses: ./.github/workflows/PublishUnity3dPackage.yml
\ No newline at end of file
+      uses: ./.github/workflows/PublishUnity3dPackage.yml
+      permissions:
+        contents: write
\ No newline at end of file