diff --git a/.github/workflows/build_linux.yml b/.github/workflows/build_linux.yml
index 9db1c387..967b9d0c 100644
--- a/.github/workflows/build_linux.yml
+++ b/.github/workflows/build_linux.yml
@@ -5,6 +5,8 @@ on: workflow_dispatch
 jobs:
   buildAssets:
     uses: ./.github/workflows/build_assets.yml
+    permissions:
+      contents: read
 
   buildLinux-AppImage:
     needs: buildAssets
diff --git a/.github/workflows/build_mac.yml b/.github/workflows/build_mac.yml
index 2a5d8240..cca1fee9 100644
--- a/.github/workflows/build_mac.yml
+++ b/.github/workflows/build_mac.yml
@@ -5,6 +5,8 @@ on: workflow_dispatch
 jobs:
   buildAssets:
     uses: ./.github/workflows/build_assets.yml
+    permissions:
+      contents: read
 
   buildMac-AMD64:
     needs: buildAssets
diff --git a/.github/workflows/build_win.yml b/.github/workflows/build_win.yml
index 180b8f19..a062d114 100644
--- a/.github/workflows/build_win.yml
+++ b/.github/workflows/build_win.yml
@@ -5,6 +5,8 @@ on: workflow_dispatch
 jobs:
   buildAssets:
     uses: ./.github/workflows/build_assets.yml
+    permissions:
+      contents: read
 
   buildWin64:
     needs: buildAssets