diff --git a/.github/workflows/aur-publish.yml b/.github/workflows/aur-publish.yml
index 5d38037..0ab886c 100644
--- a/.github/workflows/aur-publish.yml
+++ b/.github/workflows/aur-publish.yml
@@ -10,7 +10,6 @@ on:
         description: 'Version to publish (e.g., 1.0.0)'
         required: true
 permissions: read-all
-  actions: read
 jobs:
   publish-aur:
     name: Publish to AUR
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 6281ef5..2111eb8 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -18,7 +18,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 permissions: read-all
-  actions: read
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})
diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml
index 1ef2e9f..097be56 100644
--- a/.github/workflows/container.yml
+++ b/.github/workflows/container.yml
@@ -6,7 +6,6 @@ on:
       - 'v*'
   workflow_dispatch:
 permissions: read-all
-  actions: read
 env:
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml
index 0ecee90..05d92af 100644
--- a/.github/workflows/generator-generic-ossf-slsa3-publish.yml
+++ b/.github/workflows/generator-generic-ossf-slsa3-publish.yml
@@ -17,7 +17,6 @@ on:
   release:
     types: [created]
 permissions: read-all
-  actions: read
 jobs:
   build:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/language-policy.yml b/.github/workflows/language-policy.yml
index 3a73cf1..940e571 100644
--- a/.github/workflows/language-policy.yml
+++ b/.github/workflows/language-policy.yml
@@ -12,7 +12,6 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 permissions: read-all
-  actions: read
 jobs:
   check:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0d56069..b0d0261 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -11,7 +11,6 @@ on:
         description: 'Release tag (e.g., v1.0.0)'
         required: true
 permissions: read-all
-  actions: read
 env:
   CARGO_TERM_COLOR: always
   RELEASE_TAG: ${{ github.event.inputs.tag || github.ref_name }}