diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml
index 2086a9e5..fdd84a2c 100644
--- a/.github/workflows/linux.yml
+++ b/.github/workflows/linux.yml
@@ -2,11 +2,14 @@ name: linux
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
   # -----------------------------------------------------------------------
   # Linux build matrix
   # -----------------------------------------------------------------------
-  build_linux:
+  build:
     runs-on: ubuntu-latest
     defaults:
       run:
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index 8a5de9ec..60e9e745 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -2,8 +2,11 @@ name: macos
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
-  build_osx:
+  build:
     runs-on: macOS-latest
     name: "macOS Clang (C++11, Release)"
     steps:
diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml
index 161ef2ba..c773ac76 100644
--- a/.github/workflows/windows.yml
+++ b/.github/workflows/windows.yml
@@ -2,8 +2,11 @@ name: windows
 
 on: [push, pull_request]
 
+permissions:
+  contents: read
+
 jobs:
-  build_msvc-2022:
+  build:
     runs-on: windows-latest
     strategy:
       fail-fast: true
@@ -75,7 +78,7 @@ jobs:
   # -----------------------------------------------------------------------
   # MSVC 2019 build matrix
   # -----------------------------------------------------------------------
-  build_msvc-2019:
+  build_2019:
     runs-on: windows-2019
     strategy:
       fail-fast: true