diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml
index 21765ee1..9aab3199 100644
--- a/.github/workflows/cicd.yml
+++ b/.github/workflows/cicd.yml
@@ -1,5 +1,8 @@
 name: CI/CD Pipeline
 
+permissions:
+  contents: read
+
 on:
     push:
         tags:
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index 31db63ea..15474255 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -1,5 +1,8 @@
 name: ESLint
 
+permissions:
+  contents: read
+
 on:
     pull_request:
         paths:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index eb5e03f5..c40689bc 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,5 +1,8 @@
 name: Run Tests
 
+permissions:
+  contents: read
+
 on:
   pull_request:
     branches: