diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
index 301b891..797ad0d 100644
--- a/.github/workflows/conventional-commits.yml
+++ b/.github/workflows/conventional-commits.yml
@@ -2,6 +2,9 @@ name: Conventional Commits
 
 on: pull_request
 
+permissions:
+  contents: read
+
 jobs:
   linting:
     name: Linting
diff --git a/.github/workflows/git-history.yml b/.github/workflows/git-history.yml
index 6e8d884..f8f479a 100644
--- a/.github/workflows/git-history.yml
+++ b/.github/workflows/git-history.yml
@@ -2,6 +2,9 @@ name: Git History
 
 on: pull_request
 
+permissions:
+  contents: read
+
 jobs:
   clean:
     name: Clean
diff --git a/.github/workflows/github-actions-workflows.yml b/.github/workflows/github-actions-workflows.yml
index 75ab549..8bfbf14 100644
--- a/.github/workflows/github-actions-workflows.yml
+++ b/.github/workflows/github-actions-workflows.yml
@@ -2,6 +2,9 @@ name: GitHub Actions Workflows
 
 on: pull_request
 
+permissions:
+  contents: read
+
 jobs:
   linting:
     name: Linting