diff --git a/.github/workflows/docs_mrtk2.yaml b/.github/workflows/docs_mrtk2.yaml
index d9f7407e46f..b15801c0a47 100644
--- a/.github/workflows/docs_mrtk2.yaml
+++ b/.github/workflows/docs_mrtk2.yaml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+
 jobs:
   validation:
     runs-on: windows-latest
diff --git a/.github/workflows/issue_labeler.yaml b/.github/workflows/issue_labeler.yaml
index 5f772e7b326..d0faf7b25bd 100644
--- a/.github/workflows/issue_labeler.yaml
+++ b/.github/workflows/issue_labeler.yaml
@@ -1,8 +1,12 @@
 name: "Issue Labeling"
-on:
+on:g
   issues:
     types: [opened, edited]
 
+permissions:
+  contents: read
+  issues: write
+
 jobs:
   label-issue:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/validation_mrtk2.yaml b/.github/workflows/validation_mrtk2.yaml
index 1e69c208990..4610f2ce6b8 100644
--- a/.github/workflows/validation_mrtk2.yaml
+++ b/.github/workflows/validation_mrtk2.yaml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ "main" ]
 
+permissions:
+  contents: read
+
 jobs:
   validation:
     runs-on: windows-latest