diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index f17e67eb3..26ac9d590 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -5,6 +5,10 @@ name: Security audit
 on:
   schedule:
     - cron: "0 0 * * *"
+
+permissions:
+  contents: read
+
 jobs:
   audit:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/documentation.yml b/.github/workflows/documentation.yml
index 138d99279..1ca8316db 100644
--- a/.github/workflows/documentation.yml
+++ b/.github/workflows/documentation.yml
@@ -17,6 +17,9 @@ on:
       - 'src/uu/*/locales/en-US.ftl'
       - 'Cargo.toml'
 
+permissions:
+  contents: read
+
 jobs:
   check-doc:
     name: Verify uudoc generates correct documentation
diff --git a/.github/workflows/manpage-lint.yml b/.github/workflows/manpage-lint.yml
index 8f3c6df00..f6ad5bbf0 100644
--- a/.github/workflows/manpage-lint.yml
+++ b/.github/workflows/manpage-lint.yml
@@ -22,6 +22,9 @@ on:
       - 'GNUmakefile'
       - '.github/workflows/manpage-lint.yml'
 
+permissions:
+  contents: read
+
 jobs:
   manpage-lint:
     name: Validate manpages with mandoc