diff --git a/.github/workflows/test-action.yml b/.github/workflows/test-action.yml
index 84002f6..50e9ee1 100644
--- a/.github/workflows/test-action.yml
+++ b/.github/workflows/test-action.yml
@@ -5,20 +5,10 @@ on: [pull_request]
 jobs:
   test_faas_cli_action:
     runs-on: ubuntu-latest
-    permissions:
-      actions: none
-      checks: none
-      contents: none
-      deployments: none
-      issues: none
-      packages: none
-      pull-requests: none
-      repository-projects: none
-      security-events: none
-      statuses: none
+    permissions: {}
     name: Install faas-cli and test presence in path
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
     - name: Install faas-cli
       uses: ./
     - name: Check install!
@@ -34,20 +24,11 @@ jobs:
 
   test_faas_cli_action_custom:
     runs-on: ubuntu-latest
-    permissions:
-      actions: none
-      checks: none
-      contents: none
-      deployments: none
-      issues: none
-      packages: none
-      pull-requests: none
-      repository-projects: none
-      security-events: none
-      statuses: none
+    permissions: {}
+
     name: Install Custom faas-cli and test presence in path
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
     - name: Install faas-cli
       uses: ./
       with:
@@ -65,20 +46,10 @@ jobs:
 
   test_faas_cli_action_wrong:
     runs-on: ubuntu-latest
-    permissions:
-      actions: none
-      checks: none
-      contents: none
-      deployments: none
-      issues: none
-      packages: none
-      pull-requests: none
-      repository-projects: none
-      security-events: none
-      statuses: none
+    permissions: {}
     name: Try to install a wrong Cosign
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
     - name: Install faas-cli
       uses: ./
       with: