diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 78c9c46..c24b16e 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   actions: write
   packages: write
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 5f12e3a..be8f016 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -6,6 +6,7 @@ on:
 permissions:
   actions: write
   packages: write
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
index 933285d..ebd940d 100644
--- a/.github/workflows/tag.yml
+++ b/.github/workflows/tag.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   actions: write
   packages: write
+  contents: read
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}