diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml
index 26b5f53..6787168 100644
--- a/.github/workflows/dotnet.yml
+++ b/.github/workflows/dotnet.yml
@@ -1,4 +1,11 @@
 on: push
+permissions:
+  actions: read
+  checks: write
+  contents: read
+  packages: write
+  pull-requests: read
+  security-events: write
 jobs:
   buildtest:
     name: Build, test and package
@@ -36,7 +43,7 @@ jobs:
       - name: Pack Nuget package
         run: dotnet pack LineReader/LineReader.csproj -c Release -nologo -o dist
       - name: Coveralls
-        uses: coverallsapp/github-action@master
+        uses: coverallsapp/github-action@v2.3.4
         with:
           github-token: ${{ secrets.github_token }}
           path-to-lcov: all.lcov