diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml
index 5fc8cb1fd..25d8c52f9 100644
--- a/.github/workflows/commit.yml
+++ b/.github/workflows/commit.yml
@@ -3,6 +3,7 @@ on:
   push:
     branches:
     - dev
+permissions: read-all
 jobs:
   short-tests-0:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 9206a07fd..704e78922 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -7,6 +7,7 @@ on:
     - release
     - dev
     - master
+permissions: read-all
 jobs:
   regression-test:
     runs-on: ubuntu-latest