diff --git a/.github/workflows/bdw.yml b/.github/workflows/bdw.yml
index 657c180eec..c0a4d5a63c 100644
--- a/.github/workflows/bdw.yml
+++ b/.github/workflows/bdw.yml
@@ -3,6 +3,9 @@ name: Reusable BDW workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
 #  PR_BDW_GNU1020_OPENMP_LEFT_REL_NOETI:
 #    name: PR_BDW_GNU1020_OPENMP_LEFT_REL_NOETI
diff --git a/.github/workflows/h100.yml b/.github/workflows/h100.yml
index 15665b673d..63f1c79aaa 100644
--- a/.github/workflows/h100.yml
+++ b/.github/workflows/h100.yml
@@ -3,6 +3,9 @@ name: Reusable H100 workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
   PR_HOPPER90_CUDA1180_CUDA_LEFT_RIGHT_REL:
     name: PR_HOPPER90_CUDA1180_CUDA_LEFT_RIGHT_REL
diff --git a/.github/workflows/mi210.yml b/.github/workflows/mi210.yml
index 5a6da50763..c36351aebb 100644
--- a/.github/workflows/mi210.yml
+++ b/.github/workflows/mi210.yml
@@ -3,6 +3,9 @@ name: Reusable MI210 workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
   PR_VEGA90A_ROCM561_HIP_SERIAL_LEFT:
     name: PR_VEGA90A_ROCM561_HIP_SERIAL_LEFT
diff --git a/.github/workflows/spr.yml b/.github/workflows/spr.yml
index bd4b06a7fc..37c4e01887 100644
--- a/.github/workflows/spr.yml
+++ b/.github/workflows/spr.yml
@@ -3,6 +3,9 @@ name: Reusable SPR workflow
 on:
   workflow_call
 
+permissions:
+  contents: none
+
 jobs:
   PR_SPR_ONEAPI202310_OPENMP_LEFT_MKLBLAS_MKLLAPACK_REL:
     name: PR_SPR_ONEAPI202310_OPENMP_LEFT_MKLBLAS_MKLLAPACK_REL