diff --git a/.github/workflows/code_coverage.yml b/.github/workflows/code_coverage.yml
index 173a800..e655d00 100644
--- a/.github/workflows/code_coverage.yml
+++ b/.github/workflows/code_coverage.yml
@@ -10,6 +10,9 @@ on:
     paths:
       - 'tests/**'
 
+permissions:
+  contents: read
+
 jobs:
   code-coverage:
       name: Code Coverage
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index dfe1a52..1b990fe 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -12,6 +12,9 @@ on:
     paths:
       - 'pfdl_scheduler/**'
 
+permissions:
+  contents: read
+
 jobs:
   lint-check:
     name: Lint Check
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 695fc57..20b07eb 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -10,6 +10,9 @@ on:
     paths:
       - 'pfdl_scheduler/**'
 
+permissions:
+  contents: read
+
 jobs:
   unit-tests:
     name: Unit Tests