diff --git a/.github/workflows/compare.yml b/.github/workflows/compare.yml
index ef54b5299b..222ff5269d 100644
--- a/.github/workflows/compare.yml
+++ b/.github/workflows/compare.yml
@@ -12,6 +12,9 @@ on:
         default: "webpack@webpack/webpack#master"
         required: true
 
+permissions:
+  contents: read
+
 jobs:
   bench:
     strategy:
diff --git a/.github/workflows/verify-stability.yml b/.github/workflows/verify-stability.yml
index d7b1e38d9e..4698929e06 100644
--- a/.github/workflows/verify-stability.yml
+++ b/.github/workflows/verify-stability.yml
@@ -6,6 +6,9 @@ on:
       - main
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   basic:
     strategy: