diff --git a/.github/workflows/ci.yaml.template b/.github/workflows/ci.yaml.template
index 695bcec828..8bf1a5755e 100644
--- a/.github/workflows/ci.yaml.template
+++ b/.github/workflows/ci.yaml.template
@@ -17,7 +17,8 @@ jobs:
     if: {% raw %}${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}{% endraw %}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: {% raw %}${{ github.event_name == 'schedule'}}{% endraw %}
diff --git a/.github/workflows/composer-functions-composer-storage-trigger.yaml b/.github/workflows/composer-functions-composer-storage-trigger.yaml
index 6de3c38b6f..4e5f8b1c63 100644
--- a/.github/workflows/composer-functions-composer-storage-trigger.yaml
+++ b/.github/workflows/composer-functions-composer-storage-trigger.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}
diff --git a/.github/workflows/composer.yaml b/.github/workflows/composer.yaml
index cd3870c928..efa8b05dc6 100644
--- a/.github/workflows/composer.yaml
+++ b/.github/workflows/composer.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}
diff --git a/.github/workflows/healthcare-datasets.yaml b/.github/workflows/healthcare-datasets.yaml
index 80b0efe657..1b04b554f2 100644
--- a/.github/workflows/healthcare-datasets.yaml
+++ b/.github/workflows/healthcare-datasets.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}
diff --git a/.github/workflows/healthcare-dicom.yaml b/.github/workflows/healthcare-dicom.yaml
index e0f2a40d5a..123789493f 100644
--- a/.github/workflows/healthcare-dicom.yaml
+++ b/.github/workflows/healthcare-dicom.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}
diff --git a/.github/workflows/healthcare-fhir.yaml b/.github/workflows/healthcare-fhir.yaml
index a26ceb02ce..158b5c8775 100644
--- a/.github/workflows/healthcare-fhir.yaml
+++ b/.github/workflows/healthcare-fhir.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}
diff --git a/.github/workflows/healthcare-hl7v2.yaml b/.github/workflows/healthcare-hl7v2.yaml
index 5c5bf23c0a..3ab6faa38d 100644
--- a/.github/workflows/healthcare-hl7v2.yaml
+++ b/.github/workflows/healthcare-hl7v2.yaml
@@ -17,7 +17,8 @@ jobs:
     if: ${{ github.event.action != 'labeled' || github.event.label.name == 'actions:force-run' }}
     runs-on: ubuntu-latest
     permissions:
-      contents: 'read'
+      contents: 'write'
+      pull-requests: 'write'
       id-token: 'write'
     steps:
     - uses: 'google-github-actions/auth@v0.3.1'
@@ -48,8 +49,8 @@ jobs:
         script: |
           await github.rest.issues.removeLabel({
             name: 'actions:force-run',
-            owner: context.repo.owner,
-            repo: context.repo.repo,
+            owner: 'GoogleCloudPlatform'
+            repo: 'nodejs-docs-samples',
             issue_number: context.payload.pull_request.number
           });
     - if: ${{ github.event_name == 'schedule'}}