diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 629c8ccd..22906b97 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -5,6 +5,9 @@ on:
     - master
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
 
   e2e:
diff --git a/.github/workflows/weekly_e2e.yml b/.github/workflows/weekly_e2e.yml
index d0badaf9..06ce9479 100644
--- a/.github/workflows/weekly_e2e.yml
+++ b/.github/workflows/weekly_e2e.yml
@@ -10,6 +10,9 @@ on:
     - master
     paths:
       - '**weekly_e2e.yml'
+permissions:
+  contents: read
+
 jobs:
 
   vpp_latest: