diff --git a/.github/workflows/manual.yml b/.github/workflows/manual.yml
index 1daeef15a..512e563c6 100644
--- a/.github/workflows/manual.yml
+++ b/.github/workflows/manual.yml
@@ -23,6 +23,8 @@ on:
 jobs:
   deploy-access-client:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     if: github.event.inputs.package == 'access-client'
     steps:
       - uses: actions/checkout@v3
@@ -45,6 +47,8 @@ jobs:
           NODE_AUTH_TOKEN: ${{secrets.NPM_TOKEN}}
   deploy-upload-client:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     if: github.event.inputs.package == 'upload-client'
     steps:
       - uses: actions/checkout@v3
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3328e2909..f5f118574 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,9 @@ on:
 jobs:
   release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     outputs:
       paths_released: ${{ steps.release.outputs.paths_released }}
     steps:
diff --git a/packages/upload-api/src/customer/get.js b/packages/upload-api/src/customer/get.js
index 96d7cd159..89dbc93c6 100644
--- a/packages/upload-api/src/customer/get.js
+++ b/packages/upload-api/src/customer/get.js
@@ -40,6 +40,9 @@ class UnknownProvider extends Provider.Failure {
     this.name = /** @type {const} */ ('UnknownProvider')
   }
 
+  /**
+   *
+   */
   describe() {
     return `Provider ${this.did} not found`
   }