diff --git a/.github/workflows/update-and-sign.yml b/.github/workflows/update-and-sign.yml
index 2ce7bd694..983bea69a 100644
--- a/.github/workflows/update-and-sign.yml
+++ b/.github/workflows/update-and-sign.yml
@@ -12,7 +12,6 @@ env:
   GITHUB_WORKFLOW_URL: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}
 
 permissions:
-  contents: read
   pull-requests: write
 
 jobs:
diff --git a/.github/workflows/update-chains-file.yml b/.github/workflows/update-chains-file.yml
index beacbb0f2..c24508e1d 100644
--- a/.github/workflows/update-chains-file.yml
+++ b/.github/workflows/update-chains-file.yml
@@ -13,7 +13,6 @@ on:
           - prod
 
 permissions:
-  contents: read
   pull-requests: write
 
 jobs:
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index 4af09c75a..38da7b311 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -10,7 +10,6 @@ env:
   NOTIFY_MATRIX: true
 
 permissions:
-  contents: read
   pull-requests: write
 
 jobs: