diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 45e499231..e9e115859 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,10 @@ on:
      - master
      - release/**
 
+permissions:
+    contents: read
+    checks: write
+
 jobs:
   build_linux:
 
diff --git a/.github/workflows/ci_windows.yml b/.github/workflows/ci_windows.yml
index 1d2e10c18..3d35841b9 100644
--- a/.github/workflows/ci_windows.yml
+++ b/.github/workflows/ci_windows.yml
@@ -13,6 +13,10 @@ on:
      - master
      - release/**
 
+permissions:
+     contents: read
+     checks: write
+
 jobs:
   build_windows: