diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7601521..8b38594 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -68,6 +68,9 @@ jobs:
             gh-actions
             poster
             tables
+            security
+            twodimensional
+            miscellaneous
           # NOTE: Changing requireScope from false to true is a breaking change.
           # This will reject any PR titles without a scope that were previously valid.
           # Please ensure your PR titles follow the "<type>(<scope>): <subject>" format.
diff --git a/.github/workflows/examples.yml b/.github/workflows/examples.yml
index c70d313..39f4d19 100644
--- a/.github/workflows/examples.yml
+++ b/.github/workflows/examples.yml
@@ -1,4 +1,6 @@
 name: Test Examples
+permissions:
+  contents: read
 
 on:
   push:
diff --git a/.github/workflows/pr-status-check.yml b/.github/workflows/pr-status-check.yml
index 7e85c2b..7ee0850 100644
--- a/.github/workflows/pr-status-check.yml
+++ b/.github/workflows/pr-status-check.yml
@@ -1,4 +1,7 @@
 name: PR Status Dashboard
+permissions:
+  contents: read
+  issues: write
 on:
   schedule:
     - cron: '0 9 * * 1'  # Lunes a las 9 AM
diff --git a/.github/workflows/tag-protection.yml b/.github/workflows/tag-protection.yml
index 87a7690..a91262a 100644
--- a/.github/workflows/tag-protection.yml
+++ b/.github/workflows/tag-protection.yml
@@ -1,4 +1,6 @@
 name: Protect Version Tags
+permissions:
+  contents: read
 
 on:
   push: