diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 38bcaeb..bfc105e 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -9,6 +9,8 @@ on:
       - 'feat-*'
   workflow_dispatch:
 
+permissions: { }
+
 env:
   PACKAGE_NAME: aws-kotlin-repo-tools
   RUN: ${{ github.run_id }}-${{ github.run_number }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 79de527..ff6bc1c 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -9,6 +9,8 @@ on:
     branches: [ main ]
   workflow_dispatch:
 
+permissions: { }
+
 env:
   PACKAGE_NAME: aws-kotlin-repo-tools
 
diff --git a/.github/workflows/merge-main.yml b/.github/workflows/merge-main.yml
index 63b6de4..ea6032c 100644
--- a/.github/workflows/merge-main.yml
+++ b/.github/workflows/merge-main.yml
@@ -3,7 +3,7 @@ on:
   push:
     branches: [ main ]
   workflow_dispatch:
-
+permissions: { }
 jobs:
   merge:
     runs-on: ubuntu-latest