diff --git a/.github/workflows/format.yaml b/.github/workflows/format.yaml
index 54013acb..c30702a2 100644
--- a/.github/workflows/format.yaml
+++ b/.github/workflows/format.yaml
@@ -8,6 +8,9 @@ on:
 env:
   RUSTFLAGS: "--cfg reqwest_unstable"
 
+permissions:
+  contents: read
+
 jobs:
   fmt:
     name: rustfmt
diff --git a/.github/workflows/python-code-checks.yaml b/.github/workflows/python-code-checks.yaml
index e179bd5e..b01bd519 100644
--- a/.github/workflows/python-code-checks.yaml
+++ b/.github/workflows/python-code-checks.yaml
@@ -4,6 +4,9 @@ on:
   workflow_dispatch: null
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   lint_check:
     name: Lint check