diff --git a/.github/workflows/deploy-backend.yml b/.github/workflows/deploy-backend.yml
index 38ea4df..693c7c6 100644
--- a/.github/workflows/deploy-backend.yml
+++ b/.github/workflows/deploy-backend.yml
@@ -51,6 +51,9 @@
 
 name: Deploy Backend to EC2
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: ['dev', 'main']
diff --git a/.github/workflows/django-tests.yml b/.github/workflows/django-tests.yml
index 71681e2..6bca8c2 100644
--- a/.github/workflows/django-tests.yml
+++ b/.github/workflows/django-tests.yml
@@ -9,6 +9,9 @@ on:
     branches: [dev, main]
   workflow_call:
 
+permissions:
+  contents: read
+
 jobs:
   django-tests:
     runs-on: ubuntu-latest