diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 968ab81..e77192f 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -8,9 +8,14 @@ on:
       - "*"
   pull_request:
 
+permissions: read-all
+
 jobs:
   docker:
     uses: Drakkar-Software/.github/.github/workflows/docker_workflow.yml@master
+    permissions:
+      contents: read
+      packages: write
     with:
       distribution_name: marketmaking
     secrets: inherit
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b491c9f..7a9e348 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -5,6 +5,8 @@ on:
       - '*'
   pull_request:
 
+permissions: read-all
+
 jobs:
   lint:
     name: ${{ matrix.os }}${{ matrix.arch }} - Python ${{ matrix.version }} - lint