diff --git a/.github/workflows/build-tests.yml b/.github/workflows/build-tests.yml
index f273dc5e..5bd0dc9a 100644
--- a/.github/workflows/build-tests.yml
+++ b/.github/workflows/build-tests.yml
@@ -7,6 +7,8 @@ on:
 
   pull_request:
 
+permissions: {}
+
 jobs:
   build:
     strategy:
@@ -16,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     container: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build test for ${{ matrix.version }} on ${{ matrix.os }}
         timeout-minutes: 10
         run: |