diff --git a/.github/workflows/run_e2e.yaml b/.github/workflows/run_e2e.yaml
index 370a02fbc..a879bcf77 100644
--- a/.github/workflows/run_e2e.yaml
+++ b/.github/workflows/run_e2e.yaml
@@ -6,6 +6,9 @@ on:
     branches:
     - master
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     name: End-2-End tests
diff --git a/.github/workflows/run_tests.yaml b/.github/workflows/run_tests.yaml
index 64969413f..9a1f5c9fe 100644
--- a/.github/workflows/run_tests.yaml
+++ b/.github/workflows/run_tests.yaml
@@ -6,6 +6,9 @@ on:
     branches:
     - master
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     name: Unit tests and coverage
@@ -24,7 +27,7 @@ jobs:
     - name: Convert coverage to lcov
       uses: jandelgado/gcov2lcov-action@2477d9ec11814a9326e7fdde8d315783d163edb7 # v1.0.8
     - name: Coveralls
-      uses: coverallsapp/github-action@master
+      uses: coverallsapp/github-action@09b709cf6a16e30b0808ba050c7a6e8a5ef13f8d # v1.2.5
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
         path-to-lcov: coverage.lcov