diff --git a/.github/workflows/checkpatch.yml b/.github/workflows/checkpatch.yml
index 2ac69af..a6c39fd 100644
--- a/.github/workflows/checkpatch.yml
+++ b/.github/workflows/checkpatch.yml
@@ -4,6 +4,8 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions: read-all
+
 jobs:
   checkpatch:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/iut_zephyr_build.yml b/.github/workflows/iut_zephyr_build.yml
index 31379bc..171d21d 100644
--- a/.github/workflows/iut_zephyr_build.yml
+++ b/.github/workflows/iut_zephyr_build.yml
@@ -6,6 +6,8 @@ on:
   schedule:
     - cron: '0 20 * * 2,6'
 
+permissions: read-all
+
 jobs:
   iut_zephyr_build:
     runs-on: ubuntu-22.04
diff --git a/.github/workflows/sedi_docs_update.yml b/.github/workflows/sedi_docs_update.yml
index 60778ba..93c0240 100644
--- a/.github/workflows/sedi_docs_update.yml
+++ b/.github/workflows/sedi_docs_update.yml
@@ -4,6 +4,8 @@ on:
   push:
     branches: [ main ]
 
+permissions: read-all
+
 jobs:
   update_sedi_docs:
     runs-on: ubuntu-22.04