diff --git a/README.md b/README.md
index 04231652..759e8052 100644
--- a/README.md
+++ b/README.md
@@ -216,6 +216,8 @@ pkg.pr.new is not available in your local environment and it only works in workf
 name: Publish Any Commit
 on: [push, pull_request]
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -247,6 +249,8 @@ on:
   pull_request_review:
     types: [submitted]
 
+permissions: {}
+
 jobs:
   check:
     # First, trigger a permissions check on the user approving the pull request.
@@ -317,6 +321,8 @@ This is useful for using published packages in other subsequent jobs immediately
 name: Publish and Test Packages
 on: [push, pull_request]
 
+permissions: {}
+
 jobs:
   publish:
     runs-on: ubuntu-latest