diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5bd87406..7bef9b1d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,6 +10,9 @@ on:
   schedule:
     - cron: '0 0 * * 0'
 
+permissions:
+  contents: read
+
 jobs:
   self-runner:
     continue-on-error: true
@@ -24,6 +27,11 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+          token: ${{ github.token }}
+          ssh-strict: false
       - uses: julia-actions/setup-julia@latest
         with:
           version: ${{ matrix.julia-version }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 95c998c9..09914b68 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -21,6 +21,11 @@ jobs:
 
     steps:
       - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+          token: ${{ github.token }}
+          ssh-strict: false
       - uses: julia-actions/setup-julia@latest
         with:
           version: 'lts'