diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e408a42b..4f93a24e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,4 +1,6 @@
 name: CI Workflow
+permissions: read-all
+
 on:
   pull_request:
     branches:
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index cda7faf3..af1272e5 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -11,6 +11,8 @@
 #
 name: "CodeQL"
 
+permissions: read-all
+
 on:
   push:
     branches: [ master ]
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 2a7aa5ca..ad4751fc 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -1,4 +1,5 @@
 name: Docker
+permissions: read-all
 on:
   schedule:
     - cron: '0 1 * * *'
diff --git a/.github/workflows/linters.yml b/.github/workflows/linters.yml
index a837112c..b952adc7 100644
--- a/.github/workflows/linters.yml
+++ b/.github/workflows/linters.yml
@@ -1,4 +1,6 @@
 name: Linters
+permissions: read-all
+
 on:
   pull_request:
     branches: