diff --git a/.github/workflows/lint-check.yml b/.github/workflows/lint-check.yml
index 6f7d68a..460731f 100644
--- a/.github/workflows/lint-check.yml
+++ b/.github/workflows/lint-check.yml
@@ -1,6 +1,8 @@
 name: "Code-Style Check"
 
-on: [ push, pull_request ]
+on: [ pull_request ]
+
+permissions: read-all
 
 jobs:
     check:
diff --git a/.github/workflows/lint-fixer.yml b/.github/workflows/lint-fixer.yml
index be1fca7..baa46ed 100644
--- a/.github/workflows/lint-fixer.yml
+++ b/.github/workflows/lint-fixer.yml
@@ -4,6 +4,8 @@ on:
     push:
         branches: [ main ]
 
+permissions: write-all
+
 jobs:
     fix:
         runs-on: ubuntu-latest
@@ -17,3 +19,4 @@ jobs:
                 with:
                     github_token: ${{ secrets.COMPOSER_TOKEN }}
                     fix: true
+                    editorconfig: false
diff --git a/.github/workflows/phpunit.yml b/.github/workflows/phpunit.yml
index c065767..66b25da 100644
--- a/.github/workflows/phpunit.yml
+++ b/.github/workflows/phpunit.yml
@@ -1,6 +1,8 @@
 name: phpunit
 
-on: [ push, pull_request ]
+on: [ push ]
+
+permissions: read-all
 
 jobs:
     build: