diff --git a/.github/workflows/main.yml b/.github/workflows/main.yaml
similarity index 87%
rename from .github/workflows/main.yml
rename to .github/workflows/main.yaml
index f871b94..fe3bd72 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yaml
@@ -1,5 +1,8 @@
 name: Lint and Test
 
+permissions:
+  contents: read
+
 on: [push]
 
 jobs:
@@ -11,6 +14,8 @@ jobs:
         node-version: [20.x]
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with:
@@ -27,6 +32,8 @@ jobs:
         node-version: [20.x]
     steps:
       - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Use Node.js ${{ matrix.node-version }}
         uses: actions/setup-node@v4
         with: