diff --git a/.github/workflows/add_issues_to_major_project.yaml b/.github/workflows/add_issues_to_major_project.yaml
index 4a4258121..a4a40cefd 100644
--- a/.github/workflows/add_issues_to_major_project.yaml
+++ b/.github/workflows/add_issues_to_major_project.yaml
@@ -8,8 +8,7 @@ on:
       - opened
       # Triggers the workflow when a new issue is opened in the repository.
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   add-to-project:
diff --git a/.github/workflows/ai_ide_config_notice.yml b/.github/workflows/ai_ide_config_notice.yml
index d4bbfa2b5..0b2628ccb 100644
--- a/.github/workflows/ai_ide_config_notice.yml
+++ b/.github/workflows/ai_ide_config_notice.yml
@@ -28,6 +28,8 @@ on:
       - '**/AI.md'
       - '**/AI-*.md'
 
+permissions: {}
+
 jobs:
   notice:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1db979a44..f9b58c413 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -121,6 +121,7 @@ jobs:
   published:
     needs: release
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - uses: GOSCHEN/http-status-code@944938ed534b092b9f7e1e5c6b08c5d9bbc35162 # v1.1.0
         with:
diff --git a/.github/workflows/test_report.yaml b/.github/workflows/test_report.yaml
index fff5f1a66..ac408d38f 100644
--- a/.github/workflows/test_report.yaml
+++ b/.github/workflows/test_report.yaml
@@ -40,7 +40,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       checks: write
-      statuses: write
     needs: report
     if: always()
     steps: