diff --git a/.github/workflows/on-push-master.yml b/.github/workflows/on-push-master.yml
index ed28c4195..021c9b810 100644
--- a/.github/workflows/on-push-master.yml
+++ b/.github/workflows/on-push-master.yml
@@ -3,6 +3,10 @@ on:
   push:
     branches:
       - master
+
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Unit and Integration Tests
diff --git a/.github/workflows/pull-request-tests.yml b/.github/workflows/pull-request-tests.yml
index 798b57da1..d36124b75 100644
--- a/.github/workflows/pull-request-tests.yml
+++ b/.github/workflows/pull-request-tests.yml
@@ -3,6 +3,10 @@ on:
   pull_request:
     branches:
       - master
+
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Run Tests