diff --git a/.github/workflows/objective-c-xcode.yml b/.github/workflows/objective-c-xcode.yml
index a458d0b..098f84a 100644
--- a/.github/workflows/objective-c-xcode.yml
+++ b/.github/workflows/objective-c-xcode.yml
@@ -1,4 +1,6 @@
 name: Build
+permissions:
+  contents: read
 
 on:
   push:
diff --git a/.github/workflows/update-homebrew.yml b/.github/workflows/update-homebrew.yml
index 789a8ff..d84ab6c 100644
--- a/.github/workflows/update-homebrew.yml
+++ b/.github/workflows/update-homebrew.yml
@@ -1,5 +1,7 @@
 # .github/workflows/update-homebrew.yml
 name: Update Homebrew Tap
+permissions:
+  contents: read
 
 on:
   release: