diff --git a/.github/workflows/TagBot.yml b/.github/workflows/TagBot.yml
index 90dc1009d..4bad0ec93 100644
--- a/.github/workflows/TagBot.yml
+++ b/.github/workflows/TagBot.yml
@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
     inputs:
       lookback:
-        default: 3
+        default: "3"
 permissions:
   actions: read
   checks: read
diff --git a/.github/workflows/delete-preview.yml b/.github/workflows/delete-preview.yml
index 76dbf0488..94ef07bf2 100644
--- a/.github/workflows/delete-preview.yml
+++ b/.github/workflows/delete-preview.yml
@@ -6,6 +6,8 @@ on:
 jobs:
   delete-preview:
     name: Delete preview deployment
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4