diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index b2e9f30..a66237e 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   security-events: write
+  actions: read
 
 env:
   CARGO_TERM_COLOR: always
@@ -70,7 +71,7 @@ jobs:
         run: cargo build --verbose
 
       - name: Upload analysis results to GitHub
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: rust-clippy-results.sarif
           wait-for-processing: true
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 382a611..f77a6a2 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   security-events: write
+  actions: read
 
 jobs:
   test: