diff --git a/.github/workflows/backend-test.yml b/.github/workflows/backend-test.yml
index 317d89f13..4ee888c7e 100644
--- a/.github/workflows/backend-test.yml
+++ b/.github/workflows/backend-test.yml
@@ -12,6 +12,9 @@ on:
     paths:
       - backend/**
 
+permissions:
+  contents: read
+
 jobs:
   backend-test:
     name: Backend Test
diff --git a/.github/workflows/regression.yml b/.github/workflows/regression.yml
index 2e97b85aa..a8e9a374a 100644
--- a/.github/workflows/regression.yml
+++ b/.github/workflows/regression.yml
@@ -19,6 +19,9 @@ on:
           - openai
           - gemini
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build