diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 35b59d3..e27b61c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -52,6 +52,8 @@ jobs:
     name: Code linting
     runs-on: ubuntu-latest
     needs: [deps]
+    permissions:
+      contents: read
     strategy:
       matrix:
         command:
@@ -78,6 +80,7 @@ jobs:
     name: Code linting Report
     runs-on: ubuntu-latest
     needs: [lint]
+    permissions: {}
     if: ${{ always() }}
     steps:
       - name: Linting fail
@@ -88,6 +91,8 @@ jobs:
     name: Unit Tests
     runs-on: ubuntu-latest
     needs: [deps]
+    permissions:
+      contents: read
     strategy:
       matrix:
         shardIndex: [1, 2, 3]
@@ -121,6 +126,8 @@ jobs:
     name: Merge Coverage Reports
     runs-on: ubuntu-latest
     needs: [test]
+    permissions:
+      contents: read
     steps:
       - name: Checkout repo
         uses: actions/checkout@v6
@@ -150,6 +157,7 @@ jobs:
     name: Unit Tests Report
     runs-on: ubuntu-latest
     needs: [test, coverage]
+    permissions: {}
     if: ${{ always() }}
     steps:
       - name: Unit tests fail