diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index 31e624e..1a9dc9b 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -4,6 +4,8 @@ name: Branch Checks
 on:
   pull_request:
 
+permissions: {}
+
 jobs:
   target_branch:
     name: PR targets branch
diff --git a/.github/workflows/dependent-issues.yml b/.github/workflows/dependent-issues.yml
index 91bde50..aec23b7 100644
--- a/.github/workflows/dependent-issues.yml
+++ b/.github/workflows/dependent-issues.yml
@@ -19,6 +19,11 @@ on:
   schedule:
     - cron: '0 0/6 * * *'  # every 6 hours
 
+permissions:
+  issues: write
+  pull-requests: write
+  statuses: write
+
 jobs:
   check:
     name: Check Dependencies
diff --git a/.github/workflows/e2e-full.yml b/.github/workflows/e2e-full.yml
index e02b6b2..75d016d 100644
--- a/.github/workflows/e2e-full.yml
+++ b/.github/workflows/e2e-full.yml
@@ -5,6 +5,8 @@ on:
   pull_request:
     types: [labeled, opened, synchronize, reopened]
 
+permissions: {}
+
 jobs:
   e2e:
     name: E2E
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 3497da5..ce0957b 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -4,6 +4,8 @@ name: End to End Default
 on:
   pull_request:
 
+permissions: {}
+
 jobs:
   e2e:
     name: E2E
diff --git a/.github/workflows/flake_finder.yml b/.github/workflows/flake_finder.yml
index a299647..d1f93ef 100644
--- a/.github/workflows/flake_finder.yml
+++ b/.github/workflows/flake_finder.yml
@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: "0 0 * * *"
 
+permissions: {}
+
 jobs:
   e2e:
     name: E2E
diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml
index cfd575a..dd0a858 100644
--- a/.github/workflows/linting.yml
+++ b/.github/workflows/linting.yml
@@ -4,6 +4,8 @@ name: Linting
 on:
   pull_request:
 
+permissions: {}
+
 jobs:
   apply-suggestions-commits:
     name: 'No "Apply suggestions from code review" Commits'
diff --git a/.github/workflows/periodic.yml b/.github/workflows/periodic.yml
index 879a081..ccf590a 100644
--- a/.github/workflows/periodic.yml
+++ b/.github/workflows/periodic.yml
@@ -5,6 +5,8 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
+permissions: {}
+
 jobs:
   markdown-link-check-periodic:
     name: Markdown Links (all files)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1c7d3e4..6158e35 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -6,6 +6,8 @@ on:
     branches:
       - devel
 
+permissions: {}
+
 jobs:
   release:
     name: Release