diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 8439df8..92ad91c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -16,6 +16,8 @@ permissions:
 jobs:
   scorecard:
     permissions:
+      actions: read
+      contents: read
       security-events: write
       id-token: write
     uses: szl-holdings/.github/.github/workflows/reusable-scorecard.yml@ebd2128c691b850c84438b671fbb512945933776
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index c8266f4..94cac14 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -16,6 +16,7 @@ permissions:
 jobs:
   trivy:
     permissions:
+      contents: read
       security-events: write
     uses: szl-holdings/.github/.github/workflows/reusable-trivy.yml@ebd2128c691b850c84438b671fbb512945933776
     secrets: inherit