diff --git a/.github/workflows/build-release-zip.yml b/.github/workflows/build-release-zip.yml
index b3058f3..2808f38 100644
--- a/.github/workflows/build-release-zip.yml
+++ b/.github/workflows/build-release-zip.yml
@@ -1,5 +1,9 @@
 name: Build release zip
 
+permissions:
+  contents: read
+  actions: write
+
 on:
   workflow_dispatch:
   release:
diff --git a/.github/workflows/phpcs.yml b/.github/workflows/phpcs.yml
index 0a6d89c..e34ba8f 100644
--- a/.github/workflows/phpcs.yml
+++ b/.github/workflows/phpcs.yml
@@ -9,6 +9,9 @@ on:
     branches:
       - develop
 
+permissions:
+  contents: read
+
 jobs:
   phpcs:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/stable.yml b/.github/workflows/stable.yml
index 9fda9bd..1ebab6a 100644
--- a/.github/workflows/stable.yml
+++ b/.github/workflows/stable.yml
@@ -1,5 +1,8 @@
 name: Build Stable branch
 
+permissions:
+  contents: write
+
 on:
   push:
     branches:
diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml
index 4e64eb1..3c0ea16 100644
--- a/.github/workflows/testing.yml
+++ b/.github/workflows/testing.yml
@@ -1,5 +1,8 @@
 name: Functional Test
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   push: