diff --git a/.github/workflows/code-quality.yml b/.github/workflows/code-quality.yml
index 07f3d8b..04b1aee 100644
--- a/.github/workflows/code-quality.yml
+++ b/.github/workflows/code-quality.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   code-quality:
     name: Code Quality Checks
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 31a9298..4b44517 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,13 +5,12 @@ on:
     tags:
       - 'v[0-9]+.[0-9]+.[0-9]+*'
 
-permissions:
-  contents: write
-
 jobs:
   build-and-release:
     name: Build and Release Binaries
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
 
     steps:
       - name: Checkout code
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index a3be2ce..3526570 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -3,6 +3,9 @@ name: Unit Tests
 on:
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   unit-tests:
     runs-on: ubuntu-latest