diff --git a/.github/workflows/issue_comment.yml b/.github/workflows/issue_comment.yml
index 6c7d9ef..a0f1796 100644
--- a/.github/workflows/issue_comment.yml
+++ b/.github/workflows/issue_comment.yml
@@ -7,6 +7,10 @@ jobs:
   sync_issue_comments_to_jira:
     name: Sync Issue Comments to Jira
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: write
     steps:
       - uses: actions/checkout@master
       - name: Sync issue comments to JIRA
diff --git a/.github/workflows/new_issues.yml b/.github/workflows/new_issues.yml
index 0fc5e7c..7e0b2be 100644
--- a/.github/workflows/new_issues.yml
+++ b/.github/workflows/new_issues.yml
@@ -7,6 +7,10 @@ jobs:
   sync_issues_to_jira:
     name: Sync issues to Jira
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: write
     steps:
       - uses: actions/checkout@master
       - name: Sync GitHub issues to Jira project
diff --git a/.github/workflows/new_prs.yml b/.github/workflows/new_prs.yml
index 1b8f64c..a6795f1 100644
--- a/.github/workflows/new_prs.yml
+++ b/.github/workflows/new_prs.yml
@@ -14,8 +14,12 @@ jobs:
   sync_prs_to_jira:
     name: Sync PRs to Jira
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: read
+      issues: write
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Sync PRs to Jira project
         uses: espressif/github-actions/sync_issues_to_jira@master
         with: