diff --git a/.github/workflows/frontend-lint.yml b/.github/workflows/frontend-lint.yml
index 7e9f9e76e9..4625c1ad71 100644
--- a/.github/workflows/frontend-lint.yml
+++ b/.github/workflows/frontend-lint.yml
@@ -5,6 +5,9 @@ on:
     paths:
       - 'frontend/**'
 
+permissions:
+  contents: read
+
 jobs:
   lint-frontend:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/pr-title-lint.yml b/.github/workflows/pr-title-lint.yml
index 04afb9d2ce..285bc6d997 100644
--- a/.github/workflows/pr-title-lint.yml
+++ b/.github/workflows/pr-title-lint.yml
@@ -9,6 +9,9 @@ on:
     # Possible values: https://help.github.com/en/actions/reference/events-that-trigger-workflows#pull-request-event-pull_request
     types: [opened, edited, reopened, synchronize]
 
+permissions:
+  contents: read
+
 jobs:
   pr-title-lint:
     uses: linuxfoundation/lfx-ui/.github/workflows/_pr-title-lint.yml@main
\ No newline at end of file