diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml
index 2b8b30a..5061e9b 100644
--- a/.github/workflows/ubuntu.yml
+++ b/.github/workflows/ubuntu.yml
@@ -10,6 +10,8 @@ on:
     - '.github/workflows/**'
     - '!.github/workflows/ubuntu.yml'
 
+permissions: read
+
 jobs:
   ubuntu-20-04:
     runs-on: ubuntu-20.04
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index eb5f24b..4d6dfc9 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -12,6 +12,8 @@ on:
     - '!.github/workflows/windows.yml'
     - '!.github/workflows/EnterDevShell.ps1'
 
+permissions: read
+
 jobs:
   windows-msvc:
     runs-on: windows-2022