diff --git a/.github/workflows/python-test.yml b/.github/workflows/python-test.yml
index 6d0d1e5e..03cc32bf 100644
--- a/.github/workflows/python-test.yml
+++ b/.github/workflows/python-test.yml
@@ -3,7 +3,6 @@ name: Python Tests (consolidated)
 permissions:
   contents: read
 
-
 on:
   push:
     branches: [ main ]
@@ -56,6 +55,10 @@ jobs:
 
   tests:
     name: Run tests matrix
+
+    permissions:
+      contents: read
+
     runs-on: ubuntu-latest
     strategy:
       matrix:
diff --git a/.github/workflows/python-tests.yml b/.github/workflows/python-tests.yml
index e4c4fb67..3db51850 100644
--- a/.github/workflows/python-tests.yml
+++ b/.github/workflows/python-tests.yml
@@ -1,7 +1,3 @@
-
-permissions:
-  contents: read
-
 name: Python Tests
 
 on:
@@ -10,6 +6,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     runs-on: ubuntu-latest