diff --git a/.github/workflows/release-bitcoind.yml b/.github/workflows/release-bitcoind.yml
index 7a212a9..23890d7 100644
--- a/.github/workflows/release-bitcoind.yml
+++ b/.github/workflows/release-bitcoind.yml
@@ -7,6 +7,9 @@ on:
     branches: [main]
     paths: ["images/bitcoind/**"]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   call:
     uses: ./.github/workflows/release-image.yml
diff --git a/.github/workflows/release-dogecoind.yml b/.github/workflows/release-dogecoind.yml
index b2a6474..944f515 100644
--- a/.github/workflows/release-dogecoind.yml
+++ b/.github/workflows/release-dogecoind.yml
@@ -7,6 +7,9 @@ on:
     branches: [main]
     paths: ["images/dogecoind/**"]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   call:
     uses: ./.github/workflows/release-image.yml
diff --git a/.github/workflows/release-rippled.yml b/.github/workflows/release-rippled.yml
index 80f3638..2d22b4f 100644
--- a/.github/workflows/release-rippled.yml
+++ b/.github/workflows/release-rippled.yml
@@ -7,6 +7,9 @@ on:
     branches: [main]
     paths: ["images/rippled/**"]
 
+# Declare default permissions as read only.
+permissions: read-all
+
 jobs:
   call:
     uses: ./.github/workflows/release-image.yml