diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index c46b3e798a..4ec0fa80cd 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -2,6 +2,9 @@ name: Behat tests 1.11.x 🐞
 
 on: [push, pull_request]
 
+permissions:
+    contents: read
+
 jobs:
     build:
         name: PHP ${{ matrix.php-versions }} Test on ${{ matrix.operating-system }}
diff --git a/.github/workflows/php_cs.yml b/.github/workflows/php_cs.yml
index 3cf971c599..7d4decdff4 100644
--- a/.github/workflows/php_cs.yml
+++ b/.github/workflows/php_cs.yml
@@ -2,6 +2,9 @@ name: PHP-CS-Fixer
 
 on: [ push, pull_request ]
 
+permissions:
+    contents: read
+
 jobs:
   composer_install:
     runs-on: ubuntu-20.04