diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml
index 4c6eba9..0e1faf2 100644
--- a/.github/workflows/code-coverage.yml
+++ b/.github/workflows/code-coverage.yml
@@ -2,6 +2,9 @@ name: Running code coverage
 
 on: [push]
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     name: Setup environment
diff --git a/.github/workflows/deploy-github-pages.yml b/.github/workflows/deploy-github-pages.yml
index 4e1826a..d8f9aa4 100644
--- a/.github/workflows/deploy-github-pages.yml
+++ b/.github/workflows/deploy-github-pages.yml
@@ -5,6 +5,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     name: Setup environment
@@ -19,6 +22,8 @@ jobs:
     name: Run documentation
     runs-on: ubuntu-latest
     needs: setup # Need to wait for setup
+    permissions:
+      contents: write
     steps:
       - uses: actions/checkout@v1 # Get last commit pushed
 
diff --git a/.github/workflows/format-check-build.yml b/.github/workflows/format-check-build.yml
index 24079bc..d7d6877 100644
--- a/.github/workflows/format-check-build.yml
+++ b/.github/workflows/format-check-build.yml
@@ -5,6 +5,9 @@ on:
     branches-ignore:
       - "main"
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     name: Setup environment
diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml
index 0abf7c3..853cb89 100644
--- a/.github/workflows/run-tests.yml
+++ b/.github/workflows/run-tests.yml
@@ -5,6 +5,9 @@ on:
     branches-ignore:
       - "main"
 
+permissions:
+  contents: read
+
 jobs:
   setup:
     name: Setup environment