diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 6b47bb7..a9e11e4 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -1,6 +1,8 @@
 ---
 name: Check the container can be built
 
+permissions: read-all
+
 on:
   push:
     branches:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 85d4e1d..fd8f214 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -3,6 +3,8 @@ name: Lint
 
 on: [push, pull_request]
 
+permissions: read-all
+
 jobs:
   super-lint:
     name: Lint with Supper-Linter