diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 82af70f35..3445b4eac 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,6 @@
 name: publish
 on:
+  workflow_dispatch:
   push:
     branches:
       - 'main'
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index b7970a8fc..cb1eeca35 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -12,6 +12,7 @@
 name: "CodeQL"
 
 on:
+  workflow_dispatch:  
   push:
     branches: [ main ]
   pull_request:
@@ -24,6 +25,11 @@ jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+      statuses: write      
 
     strategy:
       fail-fast: false