diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 72fc99c..d54cf94 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   build:
     name: Ruby ${{ matrix.ruby }} with Rails ${{ matrix.rails }}
diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml
index c078044..13704a0 100644
--- a/.github/workflows/reviewdog.yml
+++ b/.github/workflows/reviewdog.yml
@@ -6,6 +6,10 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   reviewdog:
     runs-on: ubuntu-latest