diff --git a/.github/workflows/add-issue-to-project.yml b/.github/workflows/add-issue-to-project.yml
index 7a56765745..39e148cff9 100644
--- a/.github/workflows/add-issue-to-project.yml
+++ b/.github/workflows/add-issue-to-project.yml
@@ -3,6 +3,9 @@ on:
   issues:
     types:
       - opened
+permissions:
+  contents: read
+
 jobs:
   add_issue_to_project:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/add-pr-to-project.yml b/.github/workflows/add-pr-to-project.yml
index 86385fcc17..43925d2fe4 100644
--- a/.github/workflows/add-pr-to-project.yml
+++ b/.github/workflows/add-pr-to-project.yml
@@ -4,6 +4,9 @@ on:
     types: [review_requested]
     branches:
       - 'main'
+permissions:
+  contents: read
+
 jobs:
   specific_review_requested:
     name: Adding
diff --git a/.github/workflows/add-to-dev-projects.yml b/.github/workflows/add-to-dev-projects.yml
index f3478f361b..b087304c6e 100644
--- a/.github/workflows/add-to-dev-projects.yml
+++ b/.github/workflows/add-to-dev-projects.yml
@@ -3,6 +3,9 @@ on:
   pull_request_target:
     types:
       - labeled
+permissions:
+  contents: read
+
 jobs:
   add_to_data_plane-project:
     runs-on: ubuntu-latest