diff --git a/.github/workflows/ci-remote-image.yaml b/.github/workflows/ci-remote-image.yaml
index 6bd9bba..54513c0 100644
--- a/.github/workflows/ci-remote-image.yaml
+++ b/.github/workflows/ci-remote-image.yaml
@@ -1,8 +1,6 @@
 ---
 name: ci-remote-image
 
-permissions: read-all
-
 on:
   pull_request:
 
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index c15cf83..3a96236 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,6 +1,8 @@
 ---
 name: ci
 
+permissions: read-all
+
 on:
   pull_request: