diff --git a/.github/workflows/compile-cuda.yaml b/.github/workflows/compile-cuda.yaml
index 0bddcd3c744..6735dce434e 100644
--- a/.github/workflows/compile-cuda.yaml
+++ b/.github/workflows/compile-cuda.yaml
@@ -2,6 +2,9 @@ name: CUDA
 
 on: [pull_request]
 
+permissions:
+  contents: read
+
 env:
   CUDA_PATH: /usr/local/cuda
 jobs:
diff --git a/.github/workflows/compile-rocm.yaml b/.github/workflows/compile-rocm.yaml
index 2ce2a80f01a..e0fa7d6aafe 100644
--- a/.github/workflows/compile-rocm.yaml
+++ b/.github/workflows/compile-rocm.yaml
@@ -2,6 +2,9 @@ name: ROCM
 
 on: [pull_request]
 
+permissions:
+  contents: read
+
 env:
   ROCM_VER: 5-4
 jobs:
diff --git a/.github/workflows/macos-checks.yaml b/.github/workflows/macos-checks.yaml
index f207f536070..c9c3245f522 100644
--- a/.github/workflows/macos-checks.yaml
+++ b/.github/workflows/macos-checks.yaml
@@ -2,6 +2,9 @@ name: macOS
 
 on: [pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   macOS:
     runs-on: macos-latest
diff --git a/.github/workflows/ompi_mpi4py.yaml b/.github/workflows/ompi_mpi4py.yaml
index 37aefcd62de..ee3dc7b46a0 100644
--- a/.github/workflows/ompi_mpi4py.yaml
+++ b/.github/workflows/ompi_mpi4py.yaml
@@ -2,6 +2,9 @@ name: mpi4py
 
 on: [ pull_request ]
 
+permissions:
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/ompi_mpi4py_tests.yaml b/.github/workflows/ompi_mpi4py_tests.yaml
index ae47107ae89..05cd4a5ad72 100644
--- a/.github/workflows/ompi_mpi4py_tests.yaml
+++ b/.github/workflows/ompi_mpi4py_tests.yaml
@@ -12,6 +12,9 @@ on:
         required: true
         type: string
 
+permissions:
+  contents: read
+
 jobs:
   mpi4py-tests:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/ompi_nvidia.yaml b/.github/workflows/ompi_nvidia.yaml
index ed850df454c..c7815b3eba0 100644
--- a/.github/workflows/ompi_nvidia.yaml
+++ b/.github/workflows/ompi_nvidia.yaml
@@ -1,5 +1,7 @@
 name: ompi_NVIDIA CI
 on: [pull_request]
+permissions:
+  contents: read
 jobs:
 
   nvidia_deployment: