diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1f5eec8699c6..c18281fdf491 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -6,6 +6,9 @@ on:
       - site
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: pytorch/test-infra/.github/workflows/linux_job_v2.yml@main
diff --git a/.github/workflows/validate-quick-start-module.yml b/.github/workflows/validate-quick-start-module.yml
index 2813be181d01..ca843b4a4693 100644
--- a/.github/workflows/validate-quick-start-module.yml
+++ b/.github/workflows/validate-quick-start-module.yml
@@ -16,6 +16,9 @@ on:
       - .github/workflows/validate-quick-start-module.yml
   workflow_dispatch:
 
+permissions:
+  contents: read
+
 jobs:
   validate-nightly-binaries:
     uses: pytorch/test-infra/.github/workflows/validate-binaries.yml@main