diff --git a/.github/workflows/ci-no-dns.yaml b/.github/workflows/ci-no-dns.yaml
index 48a35fff..51211bdd 100644
--- a/.github/workflows/ci-no-dns.yaml
+++ b/.github/workflows/ci-no-dns.yaml
@@ -20,8 +20,6 @@ concurrency:
 jobs:
   no-dns:
     name: LXC deploy and test
-    permissions:
-      contents: read
     uses: chatmail/cmlxc/.github/workflows/lxc-test.yml@main
     with:
       cmlxc_version: main
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 1fe6a8c7..d34f79b1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -57,8 +57,6 @@ jobs:
 
   lxc-test:
     name: LXC deploy and test
-    permissions:
-      contents: read
     uses: chatmail/cmlxc/.github/workflows/lxc-test.yml@main
     with:
       cmlxc_version: main