diff --git a/.github/workflows/github-auto-assign.yml b/.github/workflows/github-auto-assign.yml
index fd8f972..baf223a 100644
--- a/.github/workflows/github-auto-assign.yml
+++ b/.github/workflows/github-auto-assign.yml
@@ -6,6 +6,8 @@ on:
   pull_request_target:
     types: [opened, ready_for_review]
 
+permissions: {}
+
 jobs:
   auto-assign:
     permissions:
diff --git a/.github/workflows/helm-lint-test.yml b/.github/workflows/helm-lint-test.yml
index 08f53cc..abf5d11 100644
--- a/.github/workflows/helm-lint-test.yml
+++ b/.github/workflows/helm-lint-test.yml
@@ -4,6 +4,8 @@ on:
   workflow_dispatch:
   pull_request:
 
+permissions: {}
+
 jobs:
   lint-test:
     permissions:
diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml
index 4a5efcb..fcee940 100644
--- a/.github/workflows/helm-release.yml
+++ b/.github/workflows/helm-release.yml
@@ -8,6 +8,10 @@ on:
     paths:
       - "charts/steampipe/**"
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   get-version:
     runs-on: ubuntu-latest
diff --git a/charts/steampipe/values.yaml b/charts/steampipe/values.yaml
index 40fbadd..24feaf4 100644
--- a/charts/steampipe/values.yaml
+++ b/charts/steampipe/values.yaml
@@ -1,7 +1,6 @@
 # Default values for steampipe.
 # This is a YAML-formatted file.
 # Declare variables to be passed into your templates.
----
 # -- Number of replicas
 replicaCount: 1