diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index abf6487..406ba9b 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]
diff --git a/.github/workflows/nostd.yml b/.github/workflows/nostd.yml
index 397a2da..7efae0f 100644
--- a/.github/workflows/nostd.yml
+++ b/.github/workflows/nostd.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]
diff --git a/.github/workflows/safety.yml b/.github/workflows/safety.yml
index 9824ba7..edf40e5 100644
--- a/.github/workflows/safety.yml
+++ b/.github/workflows/safety.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]
diff --git a/.github/workflows/scheduled.yml b/.github/workflows/scheduled.yml
index 2c15695..0215432 100644
--- a/.github/workflows/scheduled.yml
+++ b/.github/workflows/scheduled.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 4435fd7..8aa4488 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 on:
   push:
     branches: [main]