From e41ce9b71c10e57eebfa0f215e704d393774f1e1 Mon Sep 17 00:00:00 2001
From: Renaud Calle <renaud.calle@outscale.com>
Date: Mon, 1 Jun 2026 14:29:06 +0000
Subject: [PATCH] =?UTF-8?q?=F0=9F=92=9A=20ci:=20Update=20pull=20request=20?=
 =?UTF-8?q?workflow=20with=20permissions=20and=20checkout=20version?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/pull-request.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml
index 88adb20..80a3ecc 100644
--- a/.github/workflows/pull-request.yml
+++ b/.github/workflows/pull-request.yml
@@ -4,12 +4,15 @@ on:
     branches:
       - 'main'
 
+permissions:
+  contents: read
+
 jobs:
   scan:
     runs-on:  ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
     - name: Install shellcheck
-      run: sudo apt-get install -y shellcheck
+      run: sudo apt-get update && sudo apt-get install -y shellcheck
     - name: Run tests
       run: ./tests/tests.sh