diff --git a/.github/workflows/build-platforms.yml b/.github/workflows/build-platforms.yml
index 65831e8..26a88ec 100644
--- a/.github/workflows/build-platforms.yml
+++ b/.github/workflows/build-platforms.yml
@@ -19,6 +19,9 @@ on:
         type: string
         default: ''
 
+permissions:
+  contents: read
+
 env:
   RUST_BACKTRACE: 1
   CARGO_TERM_COLOR: always
diff --git a/.github/workflows/test-platform-builds.yml b/.github/workflows/test-platform-builds.yml
index 821200b..dcae194 100644
--- a/.github/workflows/test-platform-builds.yml
+++ b/.github/workflows/test-platform-builds.yml
@@ -14,6 +14,9 @@ on:
       - '.github/workflows/build-platforms.yml'
       - '.github/actions/**'
 
+permissions:
+  contents: read
+
 jobs:
   build:
     uses: ./.github/workflows/build-platforms.yml