diff --git a/.github/workflows/gleam-ci.yml b/.github/workflows/gleam-ci.yml
index 76578cd..dbb8462 100644
--- a/.github/workflows/gleam-ci.yml
+++ b/.github/workflows/gleam-ci.yml
@@ -4,7 +4,6 @@
 name: Gleam CI
 
 on:
-  permissions: contents: read
   push:
     branches: [main, develop]
     paths:
@@ -22,7 +21,6 @@ jobs:
   build:
     name: Build & Test
     runs-on: ubuntu-latest
-  permissions: contents: read
     defaults:
       run:
         working-directory: backend
@@ -34,9 +32,7 @@ jobs:
         uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # v1.18.2
         with:
           otp-version: '26.0'
-  permissions: contents: read
           gleam-version: '1.6.3'
-  permissions: contents: read
 
       - name: Cache Gleam build
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v4.0.1
@@ -63,7 +59,6 @@ jobs:
   docker:
     name: Docker Build
     runs-on: ubuntu-latest
-  permissions: contents: read
     needs: build
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
 
diff --git a/.github/workflows/language-policy.yml b/.github/workflows/language-policy.yml
index eed1ae1..cd1c7c2 100644
--- a/.github/workflows/language-policy.yml
+++ b/.github/workflows/language-policy.yml
@@ -10,14 +10,12 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-  permissions: contents: read
 permissions:
   contents: read
 
 jobs:
   check:
     runs-on: ubuntu-latest
-  permissions: contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Enforce language policies
diff --git a/.github/workflows/rescript-deno-ci.yml b/.github/workflows/rescript-deno-ci.yml
index e84b16a..c7caed5 100644
--- a/.github/workflows/rescript-deno-ci.yml
+++ b/.github/workflows/rescript-deno-ci.yml
@@ -10,7 +10,6 @@ on:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
-  permissions: contents: read
 
 permissions:
   contents: read
@@ -18,13 +17,11 @@ permissions:
 jobs:
   build:
     runs-on: ubuntu-latest
-  permissions: contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: denoland/setup-deno@909cc5acb0fdd60627fb858598759246509fa755 # v2.0.2
         with:
           deno-version: v1.x
-  permissions: contents: read
       
       - name: Deno lint
         run: deno lint
@@ -47,7 +44,6 @@ jobs:
 
   security:
     runs-on: ubuntu-latest
-  permissions: contents: read
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: denoland/setup-deno@909cc5acb0fdd60627fb858598759246509fa755 # v2.0.2