diff --git a/.github/workflows/action.yml b/.github/workflows/action.yml
index dda64fa..af57ddb 100644
--- a/.github/workflows/action.yml
+++ b/.github/workflows/action.yml
@@ -9,6 +9,10 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
+      pull-requests: write
     steps:
       - uses: actions/checkout@v3
         with:
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 9751629..91d8dd1 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -11,6 +11,9 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
     steps:
       - uses: actions/checkout@v3
 
diff --git a/.github/workflows/php.yml b/.github/workflows/php.yml
index c49f8cd..adf0023 100644
--- a/.github/workflows/php.yml
+++ b/.github/workflows/php.yml
@@ -11,6 +11,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         php: