diff --git a/.github/workflows/python-validation.yml b/.github/workflows/python-validation.yml
index 5e103fc3f0..0b7135ee23 100644
--- a/.github/workflows/python-validation.yml
+++ b/.github/workflows/python-validation.yml
@@ -9,6 +9,8 @@ env:
   PYTHON_MODULES_DIR: modules/python
 jobs:
   python-validation:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
 
     steps:
diff --git a/.github/workflows/yaml-validation.yml b/.github/workflows/yaml-validation.yml
index aa59abdcb2..6e6c51fce2 100644
--- a/.github/workflows/yaml-validation.yml
+++ b/.github/workflows/yaml-validation.yml
@@ -5,6 +5,8 @@ on:
 
 jobs:
   yaml-validation:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
 
     steps: