diff --git a/.github/workflows/build-health-checkup.yml b/.github/workflows/build-health-checkup.yml
index c127f55d1..bef5876ae 100644
--- a/.github/workflows/build-health-checkup.yml
+++ b/.github/workflows/build-health-checkup.yml
@@ -10,6 +10,9 @@ on:
 env:
   HUSKY: 0
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index 7c98863ec..f30e62c93 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -7,6 +7,9 @@ on:
 env:
   HUSKY: 0
 
+permissions:
+  contents: read
+
 jobs:
   code-quality-checks:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 87e4109be..e829f64ff 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -7,6 +7,9 @@ on:
 env:
   HUSKY: 0
 
+permissions:
+  contents: read
+
 jobs:
   unit-tests:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/visual-regression-tests.yml b/.github/workflows/visual-regression-tests.yml
index 48cc2b4a8..020e17d81 100644
--- a/.github/workflows/visual-regression-tests.yml
+++ b/.github/workflows/visual-regression-tests.yml
@@ -7,6 +7,9 @@ on:
 env:
   HUSKY: 0
 
+permissions:
+  contents: read
+
 jobs:
   visual-regression:
     runs-on: ubuntu-latest