diff --git a/.github/workflows/website-build.yml b/.github/workflows/website-build.yml
index ddafb5d..449bf22 100644
--- a/.github/workflows/website-build.yml
+++ b/.github/workflows/website-build.yml
@@ -25,7 +25,7 @@ concurrency:
   cancel-in-progress: ${{ github.event_name == 'pull_request' }}
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   build-website:
@@ -35,6 +35,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4.1.7
+        with:
+          ssh-key: ${{ secrets.WEBSITE_DEPLOY_KEY }}
 
       - name: Set up Node.js
         uses: actions/setup-node@v4
diff --git a/.github/workflows/website-roadmap-rebuild.yml b/.github/workflows/website-roadmap-rebuild.yml
index b103840..bd16e9d 100644
--- a/.github/workflows/website-roadmap-rebuild.yml
+++ b/.github/workflows/website-roadmap-rebuild.yml
@@ -12,7 +12,7 @@ concurrency:
   cancel-in-progress: false
 
 permissions:
-  contents: write
+  contents: read
 
 jobs:
   rebuild-roadmap:
@@ -27,6 +27,7 @@ jobs:
         uses: actions/checkout@v4.1.7
         with:
           ref: main
+          ssh-key: ${{ secrets.WEBSITE_DEPLOY_KEY }}
 
       - name: Set up Node.js
         uses: actions/setup-node@v4