diff --git a/.github/workflows/devbuild.yaml b/.github/workflows/devbuild.yaml
index 73ba184..763d9a1 100644
--- a/.github/workflows/devbuild.yaml
+++ b/.github/workflows/devbuild.yaml
@@ -1,5 +1,8 @@
 name: Development build
 
+permissions:
+  contents: write
+
 on:
   push:
     branches: [ dev ]
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 4f8760d..c8f2b0d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -1,4 +1,6 @@
 name: Package
+permissions:
+  contents: write
 
 on:
   release:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index af79d53..936561a 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,5 +1,8 @@
 name: Test
 
+permissions:
+  contents: read
+
 on:
   - push
   - pull_request