diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index 5c1afec56..568d834e6 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -30,6 +30,8 @@ permissions: {}
 jobs:
 
   style:
+    permissions:
+      contents: read
     uses: ./.github/workflows/style.yml
 
   tests:
@@ -44,6 +46,8 @@ jobs:
               { python-version: '3.14', toxenv: 'py314' },
             ]
       fail-fast: false
+    permissions:
+      contents: read
     uses: ./.github/workflows/tests.yml
     secrets:
       PYANSYS_CI_BOT_PACKAGE_TOKEN: ${{ secrets.PYANSYS_CI_BOT_PACKAGE_TOKEN }}