diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 98988e5ff..0557792b3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,7 @@
 name: Policy Test
 
+permissions: {}
+
 on:
   push:
     branches:
@@ -10,6 +12,10 @@ on:
       - main
       - release*
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fd19b5e83..6a49e4be0 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,5 +1,7 @@
 name: Kuttl Tests
 
+permissions: {}
+
 on:
   workflow_dispatch: {}
   pull_request: