diff --git a/.github/workflows/assets.yml b/.github/workflows/assets.yml
index 132a1d138..eb17b6f19 100644
--- a/.github/workflows/assets.yml
+++ b/.github/workflows/assets.yml
@@ -7,6 +7,9 @@ on:
       - master
       - 2.*
 
+permissions:
+  contents: read
+
 jobs:
   js:
     name: "Building assets"
diff --git a/.github/workflows/coding-standards.yml b/.github/workflows/coding-standards.yml
index 309df7383..cc7f030ec 100644
--- a/.github/workflows/coding-standards.yml
+++ b/.github/workflows/coding-standards.yml
@@ -7,6 +7,9 @@ on:
       - master
       - 2.*
 
+permissions:
+  contents: read
+
 jobs:
   coding-standards:
     name: "CS Fixer & PHPStan"
diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml
index 5327fdaca..b5de2b372 100644
--- a/.github/workflows/translations.yml
+++ b/.github/workflows/translations.yml
@@ -7,6 +7,9 @@ on:
       - master
       - 2.*
 
+permissions:
+  contents: read
+
 jobs:
   translations:
     name: "Translations"