diff --git a/.github/workflows/devskim-analysis.yml b/.github/workflows/devskim-analysis.yml
index 8090405..db4d2eb 100644
--- a/.github/workflows/devskim-analysis.yml
+++ b/.github/workflows/devskim-analysis.yml
@@ -11,6 +11,8 @@ on:
     - cron: 10 22 * * 3
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   lint:
     name: DevSkim
diff --git a/.github/workflows/msvc-code-analysis.yml b/.github/workflows/msvc-code-analysis.yml
index 5821092..f005f06 100644
--- a/.github/workflows/msvc-code-analysis.yml
+++ b/.github/workflows/msvc-code-analysis.yml
@@ -12,8 +12,7 @@ env:
   build: ${{ github.workspace }}/build
   config: Debug
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   analyze: