diff --git a/.github/workflows/publish-github-release.yml b/.github/workflows/publish-github-release.yml
index b08e068508..e752d4921a 100644
--- a/.github/workflows/publish-github-release.yml
+++ b/.github/workflows/publish-github-release.yml
@@ -3,10 +3,12 @@ name: Publish GitHub Release as newest
 on:
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
   stub:
     runs-on: ubuntu-24.04
     name: Stub
     steps:
       - name: Stub
-        run: echo "This is a stub job to trigger the workflow."
\ No newline at end of file
+        run: echo "This is a stub job to trigger the workflow."
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 7aa31e1c68..cd654fc64c 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -4,6 +4,8 @@ name: Publish
 on:
   workflow_dispatch:
 
+permissions: {}
+
 jobs:
     publish:
       runs-on: ubuntu-24.04