diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index fab5d8ab..d8f84480 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: Security
 
 on:
diff --git a/.github/workflows/tests-integration.yml b/.github/workflows/tests-integration.yml
index 8f2ee7d6..fe2a2f28 100644
--- a/.github/workflows/tests-integration.yml
+++ b/.github/workflows/tests-integration.yml
@@ -1,3 +1,5 @@
+permissions:
+  contents: read
 name: Integration Tests
 
 on:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 424b9aec..650e33f7 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -9,6 +9,8 @@ on:
       - 'go.mod'
       - .github/workflows/tests.yml
 
+permissions:
+  contents: read
 jobs:
   test:
     runs-on: ubuntu-latest