diff --git a/.github/workflows/checkpatch.yml b/.github/workflows/checkpatch.yml
index 2047c77fa..53be0ee05 100644
--- a/.github/workflows/checkpatch.yml
+++ b/.github/workflows/checkpatch.yml
@@ -1,4 +1,7 @@
 name: checkpatch review
+permissions:
+  contents: read
+  pull-requests: read
 on: [pull_request]
 jobs:
   my_review:
diff --git a/.github/workflows/pullrequest.yml b/.github/workflows/pullrequest.yml
index 8a2e271b3..6d30d109a 100644
--- a/.github/workflows/pullrequest.yml
+++ b/.github/workflows/pullrequest.yml
@@ -1,4 +1,7 @@
 name: Licence-date-verification
+permissions:
+  contents: read
+  pull-requests: read
 on:
   pull_request:
     branches:
@@ -17,7 +20,7 @@ jobs:
           fetch-depth: 0
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@v41
+        uses: tj-actions/changed-files@v47.0.0
         with:
           files_ignore: '.github/**'
       - name: List all changed files