diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 7e0ffff73..7a6a9d639 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -23,6 +23,10 @@ on:
     branches:
       - master
       - fast-dev
+
+permissions:
+  contents: read
+
 jobs:
   linting:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index c3245dcc0..e280ddc84 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -41,6 +41,9 @@ env:
   DEFAULT_TERRAFORM_VERSION: ${{ inputs.terraform_version || '1.12.2' }}
   DEFAULT_TOFU_VERSION: "1.11.0"
 
+permissions:
+  contents: read
+
 jobs:
   setup-tf-providers:
     runs-on: ubuntu-latest