diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 570a087a..84cf5d3e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -23,6 +23,9 @@ on:
   push:
     branches: ['*']
 
+permissions:
+  contents: read
+
 jobs:
   matrix:
     name: "Run tests on Python ${{ matrix.python-version }}"
@@ -32,10 +35,10 @@ jobs:
         python-version: ["3.7", "3.8", "3.9", "3.10"]
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     
     - name: Setup Python
-      uses: "actions/setup-python@v3"
+      uses: "actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97" # v7.0.0
       with:
         python-version: "${{ matrix.python-version }}"