fix

Author: romainmenke

.github/workflows/test.yml

@@ -6,15 +6,19 @@ concurrency:
   group: branch-node-${{ github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents:
+    read
+
 jobs:
   test:
     runs-on: ubuntu-latest
     strategy:
       matrix:
         node: [18, 'lts/*']
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ matrix.node }}