diff --git a/.github/workflows/build-ruleserver.yaml b/.github/workflows/build-ruleserver.yaml
index 9af0400..2349e66 100644
--- a/.github/workflows/build-ruleserver.yaml
+++ b/.github/workflows/build-ruleserver.yaml
@@ -8,6 +8,10 @@ on:
     paths:
       - "ruleserver/**"
       - ".github/workflows/build-ruleserver.yaml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
 
 jobs:
   build-ruleserver:
diff --git a/.github/workflows/build-wasm-plugin.yaml b/.github/workflows/build-wasm-plugin.yaml
index c4fa70c..9912b41 100644
--- a/.github/workflows/build-wasm-plugin.yaml
+++ b/.github/workflows/build-wasm-plugin.yaml
@@ -9,6 +9,10 @@ on:
       - "e2e"
       - "wasmplugin/**"
       - ".github/workflows/build-wasm-plugin.yaml"
+  workflow_dispatch:
+
+permissions:
+  contents: read
 
 jobs:
   build-wasm-plugin-dynamic: