diff --git a/.github/workflows/lint-docs.yml b/.github/workflows/lint-docs.yml
index caead940f3e..b5ca72b1924 100644
--- a/.github/workflows/lint-docs.yml
+++ b/.github/workflows/lint-docs.yml
@@ -8,6 +8,9 @@ on:
       - 'content/**/*.md'
       - 'content/**/*.mdx'
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/openapi-tests.yml b/.github/workflows/openapi-tests.yml
index 88a43746745..b67504cd4a7 100644
--- a/.github/workflows/openapi-tests.yml
+++ b/.github/workflows/openapi-tests.yml
@@ -5,6 +5,9 @@ on:
     paths:
       - "code-example-tests/openapi/tests/**"
 
+permissions:
+  contents: read
+
 jobs:
   run:
     runs-on: ubuntu-latest