diff --git a/.github/workflows/on-pull-request.yml b/.github/workflows/on-pull-request.yml
index 2f072fa..23cac28 100644
--- a/.github/workflows/on-pull-request.yml
+++ b/.github/workflows/on-pull-request.yml
@@ -12,10 +12,6 @@ jobs:
   test:
     runs-on: ubuntu-latest
 
-    permissions:
-      security-events: write
-      pull-requests: write
-
     steps:
       - name: Repository checkout
         uses: actions/checkout@v3
@@ -23,6 +19,6 @@ jobs:
           fetch-depth: 0
 
       - name: Differential ShellCheck
-        uses: redhat-plumbers-in-action/differential-shellcheck@latest
+        uses: redhat-plumbers-in-action/differential-shellcheck@v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}