diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml
index 2b56ac01..8269a04d 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -15,6 +15,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     #runs-on: self-hosted
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix:
@@ -74,6 +76,8 @@ jobs:
   merge:
     runs-on: ubuntu-latest
     #runs-on: self-hosted
+    permissions:
+      contents: read
     needs:
       - build
     steps:
diff --git a/.github/workflows/pylint.yml b/.github/workflows/pylint.yml
index 543772c2..9e949214 100644
--- a/.github/workflows/pylint.yml
+++ b/.github/workflows/pylint.yml
@@ -17,6 +17,8 @@ jobs:
   lint:
     #runs-on: self-hosted
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         python-version: ["3.9", "3.10" , "3.11" , "3.12", "3.13"]
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index 0f4ccf41..0930fa08 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -9,6 +9,8 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       fail-fast: false
       matrix: