diff --git a/.github/workflows/patch_faux.yml b/.github/workflows/patch_faux.yml
index 7674631f41b..12491cdba2b 100644
--- a/.github/workflows/patch_faux.yml
+++ b/.github/workflows/patch_faux.yml
@@ -1,7 +1,6 @@
 # Tests are skipped for these files but github doesn't allow "passing" hence this is required.
 
 name: Skipped Patch Test
-permissions: none
 
 on:
   pull_request:
@@ -12,6 +11,9 @@ on:
       - "**.html"
       - "**.csv"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5f0abc70c5b..66efc178b1c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Entire Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v2
         with:
           fetch-depth: 0
           persist-credentials: false
diff --git a/.github/workflows/server-tests-mariadb-faux.yml b/.github/workflows/server-tests-mariadb-faux.yml
index b448b115081..d48a13d9b06 100644
--- a/.github/workflows/server-tests-mariadb-faux.yml
+++ b/.github/workflows/server-tests-mariadb-faux.yml
@@ -1,7 +1,6 @@
 # Tests are skipped for these files but github doesn't allow "passing" hence this is required.
 
 name: Skipped Tests
-permissions: {}
 
 on:
   pull_request:
@@ -11,6 +10,9 @@ on:
       - "**.md"
       - "**.html"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest