diff --git a/.github/workflows/auto-test.yml b/.github/workflows/auto-test.yml
index 48496acf8..0a154cc74 100644
--- a/.github/workflows/auto-test.yml
+++ b/.github/workflows/auto-test.yml
@@ -84,6 +84,8 @@ jobs:
 
   check-linters:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
     - run: git config --global core.autocrlf false  # Mainly for Windows
@@ -107,6 +109,8 @@ jobs:
   e2e-test:
     needs: [ check-linters ]
     runs-on: ARM64
+    permissions:
+      contents: read
     env:
       PLAYWRIGHT_VERSION: ~1.39.0
     steps: