diff --git a/.github/workflows/chart-test.yml b/.github/workflows/chart-test.yml
index 529412e..dfd4d51 100644
--- a/.github/workflows/chart-test.yml
+++ b/.github/workflows/chart-test.yml
@@ -9,6 +9,9 @@ on:
     - cron: "0 2 * * *"
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   discover:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/helm-test.yaml b/.github/workflows/helm-test.yaml
index c848801..029c4b0 100644
--- a/.github/workflows/helm-test.yaml
+++ b/.github/workflows/helm-test.yaml
@@ -8,6 +8,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   helm-unittest:
     runs-on: ubuntu-latest