diff --git a/.github/workflows/cicd-sec-trivy.yml b/.github/workflows/cicd-sec-trivy.yml
index c4c769c..a72221e 100644
--- a/.github/workflows/cicd-sec-trivy.yml
+++ b/.github/workflows/cicd-sec-trivy.yml
@@ -4,6 +4,8 @@ on:
   push:
     branches:
       - "main"
+    paths-ignore:
+      - "CHANGELOG.md"
 
 jobs:
   reusable-workflow:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6481ed3..90287cd 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -121,8 +121,9 @@ jobs:
       - reusable-workflow-validate
       - javelin-package
     permissions:
-      contents: 'read'
+      contents: 'write'
       id-token: 'write'
+      pull-requests: 'write'
     uses: getjavelin/javelin-workflow/.github/workflows/workflow-release-changelog.yml@main
     secrets:
       DEVOPS_GITHUB_TOKEN: ${{ secrets.DEVOPS_GITHUB_TOKEN }}