diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cda92b5..1904f50 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
     branches:
       - master
 
+permissions:
+  contents: read
+
 jobs:
   fmt:
     runs-on: ubuntu-20.04
diff --git a/.github/workflows/redis-compatibility.yml b/.github/workflows/redis-compatibility.yml
index c19afcf..99c4050 100644
--- a/.github/workflows/redis-compatibility.yml
+++ b/.github/workflows/redis-compatibility.yml
@@ -2,6 +2,9 @@ name: Redis compatibility testing
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   redis:
     name: Redis ${{ matrix.redis-version }}