diff --git a/.github/workflows/ads-java.yml b/.github/workflows/ads-java.yml
index 33badadd..beb45a4a 100644
--- a/.github/workflows/ads-java.yml
+++ b/.github/workflows/ads-java.yml
@@ -1,5 +1,7 @@
 name: Ads - Java
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/ads.yml b/.github/workflows/ads.yml
index 96fbe2f1..7219f5e2 100644
--- a/.github/workflows/ads.yml
+++ b/.github/workflows/ads.yml
@@ -1,5 +1,7 @@
 name: Ads - Python
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/attackbox.yml b/.github/workflows/attackbox.yml
index 6bb0b8b7..a994ffc7 100644
--- a/.github/workflows/attackbox.yml
+++ b/.github/workflows/attackbox.yml
@@ -1,5 +1,7 @@
 name: Attackbox
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/auth.yml b/.github/workflows/auth.yml
index ce1392b8..b80fc571 100644
--- a/.github/workflows/auth.yml
+++ b/.github/workflows/auth.yml
@@ -1,5 +1,7 @@
 name: Auth
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
index 08e134ee..16236a5e 100644
--- a/.github/workflows/backend.yml
+++ b/.github/workflows/backend.yml
@@ -1,5 +1,7 @@
 name: Backend
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/dbm.yml b/.github/workflows/dbm.yml
index fd3c9f50..8cb1ae67 100644
--- a/.github/workflows/dbm.yml
+++ b/.github/workflows/dbm.yml
@@ -1,5 +1,7 @@
 name: DBM
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/discounts.yml b/.github/workflows/discounts.yml
index 7809e9c6..cd4c92ee 100644
--- a/.github/workflows/discounts.yml
+++ b/.github/workflows/discounts.yml
@@ -1,5 +1,7 @@
 name: Discounts
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index 8b2ff135..32686de2 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -1,5 +1,7 @@
 name: Frontend
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/nginx.yml b/.github/workflows/nginx.yml
index b9432147..b2c98eed 100644
--- a/.github/workflows/nginx.yml
+++ b/.github/workflows/nginx.yml
@@ -1,5 +1,7 @@
 name: Nginx
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/postgres.yml b/.github/workflows/postgres.yml
index 1e3c22be..ca27f46c 100644
--- a/.github/workflows/postgres.yml
+++ b/.github/workflows/postgres.yml
@@ -1,5 +1,7 @@
 name: postgres
 
+permissions: {}
+
 on:
   push:
     branches: [ main ]
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 290736c6..930aa6f0 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,5 +1,7 @@
 name: Publish release
 
+permissions: {}
+
 # Only release on a new tag that is a version number.
 on:
   push: