diff --git a/.github/workflows/icu_merge_ci.yml b/.github/workflows/icu_merge_ci.yml
index 2eabb39a2a2..4a716f29dbe 100644
--- a/.github/workflows/icu_merge_ci.yml
+++ b/.github/workflows/icu_merge_ci.yml
@@ -81,6 +81,10 @@ jobs:
             file: "-f ../../icu4j/perf-tests/data/conversion/xuzhimo.txt"
             flag: "-e gb18030"
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
@@ -151,6 +155,10 @@ jobs:
           - perf: normperf
             data: TestNames_Simplified_Chinese
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
@@ -212,6 +220,10 @@ jobs:
           - locale: zh
             data: udhr_cmn_hans
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
@@ -256,6 +268,10 @@ jobs:
       matrix:
         perf: [UnicodeSetAdd, UnicodeSetContains, UnicodeSetIterate]
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup
@@ -305,6 +321,10 @@ jobs:
     strategy:
       fail-fast: false
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup
@@ -356,6 +376,10 @@ jobs:
         perf: [TestICUConstruction, TestICUParse, TestICUFormat]
         locale: [en_US, de_DE]
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup
@@ -412,6 +436,10 @@ jobs:
         source_text: [TestNames_Asian, TestNames_Chinese, TestNames_SerbianSH]
         mode: [-l]
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup
@@ -538,6 +566,10 @@ jobs:
             source_text: english
             perf: TestCharsetEncoderICU
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup
@@ -608,6 +640,10 @@ jobs:
             parms: '"dddd MMM yyyy" "15 Jan 2007" 1'
             perf: TestICUFormat
 
+    permissions:
+      contents: write
+      deployments: write
+
     runs-on: ubuntu-latest
     steps:
       - name: Checkout and setup