diff --git a/.github/workflows/build-gate.yml b/.github/workflows/build-gate.yml
index 24f0bf5af..e998c686e 100644
--- a/.github/workflows/build-gate.yml
+++ b/.github/workflows/build-gate.yml
@@ -9,6 +9,9 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
   cancel-in-progress: true
+permissions:
+  pull-requests: write
+  contents: read
 jobs:
   gate:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/frogbot-scan-pull-request.yml b/.github/workflows/frogbot-scan-pull-request.yml
index c207cd6bf..50a00670f 100644
--- a/.github/workflows/frogbot-scan-pull-request.yml
+++ b/.github/workflows/frogbot-scan-pull-request.yml
@@ -7,7 +7,6 @@ permissions:
 jobs:
   scan-pull-request:
     runs-on: ubuntu-latest
-    environment: frogbot
     steps:
       - name: Setup Go with cache
         uses: jfrog/.github/actions/install-go-with-cache@main