diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml
index f450e59..94cd1b3 100644
--- a/.github/workflows/changelog.yml
+++ b/.github/workflows/changelog.yml
@@ -1,3 +1,4 @@
+---
 name: Debug Changelog # Workflow name displayed on GitHub
 on:
   workflow_dispatch: # Trigger manually
diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
index 12a94b6..51e4c6d 100644
--- a/.github/workflows/linters.yml
+++ b/.github/workflows/linters.yml
@@ -1,3 +1,4 @@
+---
 name: reviewdog
 on: [push]
 jobs:
diff --git a/.github/workflows/new-release.yml b/.github/workflows/new-release.yml
index 677c196..165a069 100644
--- a/.github/workflows/new-release.yml
+++ b/.github/workflows/new-release.yml
@@ -1,13 +1,14 @@
+---
 name: Release Daily State # Workflow name displayed on GitHub
 on:
   workflow_dispatch: # Trigger manually
   schedule:
     - cron: '30 20 * * *' # UTC is 2-3 hours behind Europe/Helsinki, my timezone
-permissions:
-  contents: write
 jobs:
   new-daily-release:
     runs-on: self-hosted
+    permissions:
+      contents: write
     outputs:
       created: ${{ steps.daily-version.outputs.created }}
       version: ${{ steps.daily-version.outputs.version }}
diff --git a/.github/workflows/semantic-pr.yml b/.github/workflows/semantic-pr.yml
index 6135bd4..0f70acb 100644
--- a/.github/workflows/semantic-pr.yml
+++ b/.github/workflows/semantic-pr.yml
@@ -1,3 +1,4 @@
+---
 name: Semantic PR
 
 on:
diff --git a/.github/workflows/update-submodules.yml b/.github/workflows/update-submodules.yml
index 6b9e4b6..5c94fc4 100644
--- a/.github/workflows/update-submodules.yml
+++ b/.github/workflows/update-submodules.yml
@@ -1,13 +1,14 @@
+---
 name: Update submodules
 on:
   schedule: [{ cron: 0 3 * * * }]
   workflow_dispatch:
-permissions:
-  contents: write
-  issues: write
-  pull-requests: write
 jobs:
   update-submodules:
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
     runs-on: self-hosted
     steps:
       - name: Checkout repository