diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
index 9f3e7b6..641ad47 100644
--- a/.github/workflows/docker.yaml
+++ b/.github/workflows/docker.yaml
@@ -1,4 +1,6 @@
 name: Docker
+permissions:
+  contents: read
 
 on:
   pull_request:
diff --git a/.github/workflows/markdown.yaml b/.github/workflows/markdown.yaml
index ae60a31..7eebe4e 100644
--- a/.github/workflows/markdown.yaml
+++ b/.github/workflows/markdown.yaml
@@ -1,4 +1,6 @@
 name: Markdown
+permissions:
+  contents: read
 
 on:
   pull_request:
diff --git a/.github/workflows/python.yaml b/.github/workflows/python.yaml
index d47f52a..dc67027 100644
--- a/.github/workflows/python.yaml
+++ b/.github/workflows/python.yaml
@@ -1,4 +1,6 @@
 name: Python
+permissions:
+  contents: read
 
 on:
   pull_request:
diff --git a/.github/workflows/rust.yaml b/.github/workflows/rust.yaml
index 4097626..9308392 100644
--- a/.github/workflows/rust.yaml
+++ b/.github/workflows/rust.yaml
@@ -1,4 +1,6 @@
 name: Rust
+permissions:
+  contents: read
 
 on:
   pull_request:
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 26dbf9d..9dc69ae 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -1,4 +1,6 @@
 name: Trivy
+permissions:
+  contents: read
 
 on:
   pull_request: