diff --git a/.github/workflows/beta.yml b/.github/workflows/beta.yml
index 5c5fa8648..010cdaa9a 100644
--- a/.github/workflows/beta.yml
+++ b/.github/workflows/beta.yml
@@ -3,6 +3,11 @@ on:
   workflow_dispatch:
   push:
     tags: ['beta*.*']
+
+permissions:
+  contents: read
+  packages: write
+
 jobs:
   build:
     runs-on: macos-latest
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index d840fc393..edf7826a2 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -1,6 +1,10 @@
 name: Run linter
 on: workflow_call
 
+
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 6819f8ccd..96fe5c14e 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -1,5 +1,10 @@
 name: Run Unit tests
 on: workflow_call
+
+permissions:
+  contents: read
+  actions: read
+
 jobs:
   unit-tests:
     runs-on: ubuntu-latest