diff --git a/.github/workflows/check-and-deploy.yml b/.github/workflows/check-and-deploy.yml
index c28c59e7c..832f6eea2 100644
--- a/.github/workflows/check-and-deploy.yml
+++ b/.github/workflows/check-and-deploy.yml
@@ -5,6 +5,8 @@ env:
 on:
   push:
 
+permissions: {}
+
 jobs:
   check-uniswap-benchmarks:
     name: Check uniswap Benchmarks
@@ -14,6 +16,8 @@ jobs:
         working-directory: ./
     steps:
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - uses: actions/setup-node@v3
         with:
@@ -69,6 +73,8 @@ jobs:
           poll-interval: 15
 
       - uses: actions/checkout@v3
+        with:
+          persist-credentials: false
       - name: Audit preview URL with Lighthouse (mobile)
         id: lighthouse_audit_mobile
         uses: treosh/lighthouse-ci-action@v9
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index 6b973f221..ec3217741 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -2,6 +2,8 @@ name: Lint
 
 on: push
 
+permissions: {}
+
 jobs:
   lint:
     name: Run linters
@@ -10,6 +12,8 @@ jobs:
     steps:
       - name: Check out Git repository
         uses: actions/checkout@v3
+        with:
+          persist-credentials: false
 
       - name: Set up node
         uses: actions/setup-node@v3
diff --git a/.github/workflows/search.yaml b/.github/workflows/search.yaml
index fcd8eca7f..a15eee8e8 100644
--- a/.github/workflows/search.yaml
+++ b/.github/workflows/search.yaml
@@ -4,11 +4,15 @@ on:
   schedule:
     - cron: '0 10 * * *'
 
+permissions: {}
+
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Set up Homebrew
         uses: Homebrew/actions/setup-homebrew@master
       - name: Run Scraper