diff --git a/.github/workflows/commit_lint.yml b/.github/workflows/commit_lint.yml
index e373f9f..3f459a1 100644
--- a/.github/workflows/commit_lint.yml
+++ b/.github/workflows/commit_lint.yml
@@ -7,6 +7,8 @@ env:
 jobs:
   Commits:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: [22.x]
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index d2135ef..42895cb 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -22,6 +22,8 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.output.page_url }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         # Coverage node version
diff --git a/.github/workflows/documentation_lint.yml b/.github/workflows/documentation_lint.yml
index 28f47d1..5333cbf 100644
--- a/.github/workflows/documentation_lint.yml
+++ b/.github/workflows/documentation_lint.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   Documentation:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: [22.x]
diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml
index 136df53..c9300f2 100644
--- a/.github/workflows/integration.yml
+++ b/.github/workflows/integration.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   Integration-checks:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: [20.x, 22.x, 24.x]
diff --git a/.github/workflows/packages_lint.yml b/.github/workflows/packages_lint.yml
index e1ebb49..f668caa 100644
--- a/.github/workflows/packages_lint.yml
+++ b/.github/workflows/packages_lint.yml
@@ -7,6 +7,8 @@ on:
 jobs:
   Packages:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         node-version: [22.x]