diff --git a/.github/workflows/lint-and-analyse.yml b/.github/workflows/lint-and-analyse.yml
index 1e71c236b..9674ee232 100644
--- a/.github/workflows/lint-and-analyse.yml
+++ b/.github/workflows/lint-and-analyse.yml
@@ -1,44 +1,47 @@
 name: Lint and analyse files
 
+permissions:
+  contents: read
+
 on: [push]
 
 jobs:
-    lint-php:
-        name: Lint file
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@v4
-            - name: Use php 7.1
-              uses: shivammathur/setup-php@v2
-              with:
-                  php-version: 7.1
-            - name: Validate composer.json and composer.lock
-              run: composer validate
-            - name: Cache module
-              uses: actions/cache@v3
-              with:
-                  path: ~/.composer/cache/
-                  key: composer-cache
-            - name: Install dependencies
-              run: composer install --no-interaction
-            - name: Lint files
-              run: composer run phpcs
+  lint-php:
+    name: Lint file
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Use php 7.1
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: 7.1
+      - name: Validate composer.json and composer.lock
+        run: composer validate
+      - name: Cache module
+        uses: actions/cache@v3
+        with:
+          path: ~/.composer/cache/
+          key: composer-cache
+      - name: Install dependencies
+        run: composer install --no-interaction
+      - name: Lint files
+        run: composer run phpcs
 
-    analyse-php:
-        name: Analyse files
-        runs-on: ubuntu-latest
-        steps:
-            - uses: actions/checkout@v4
-            - name: Use php 7.4
-              uses: shivammathur/setup-php@v2
-              with:
-                  php-version: 7.4
-            - name: Cache module
-              uses: actions/cache@v3
-              with:
-                  path: ~/.composer/cache/
-                  key: composer-cache
-            - name: Install dependencies
-              run: composer install --no-interaction
-            - name: Analyse files
-              run: composer run phpstan
+  analyse-php:
+    name: Analyse files
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - name: Use php 7.4
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: 7.4
+      - name: Cache module
+        uses: actions/cache@v3
+        with:
+          path: ~/.composer/cache/
+          key: composer-cache
+      - name: Install dependencies
+        run: composer install --no-interaction
+      - name: Analyse files
+        run: composer run phpstan
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 8aef2808f..8b5777f2d 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -1,38 +1,46 @@
 name: Run tests
 
+permissions:
+  contents: read
+
 on:
   push:
   pull_request:
     types: [opened, synchronize, reopened]
 
 jobs:
-    test-php:
-        name: Test on php ${{ matrix.php-version }} and ${{ matrix.os }}
-        runs-on: ${{ matrix.os }}
-        continue-on-error: ${{ matrix.experimental }}
-        strategy:
-            matrix:
-                php-version: ["7.1.3", "7.1", "7.2", "7.3", "7.4", "8.0", "8.1", "8.2"]
-                experimental: [false]
-                os: [ubuntu-latest]
-                composer-options: ['']
-                include:
-                    - { php-version: 'nightly', composer-options: '--ignore-platform-req=php', experimental: true, os: ubuntu-latest }
-        steps:
-            - uses: actions/checkout@v4
-            - name: Use php ${{ matrix.php-version }}
-              uses: shivammathur/setup-php@v2
-              with:
-                  php-version: ${{ matrix.php-version }}
-                  coverage: xdebug
-            - name: Cache module
-              uses: actions/cache@v3
-              with:
-                  path: ~/.composer/cache/
-                  key: composer-cache
-            - name: Install dependencies
-              run: composer install --no-interaction --prefer-dist --no-progress ${{ matrix.composer-options }}
-            - name: Run php tests
-              run: composer run test
-            - name: Send coverage
-              uses: codecov/codecov-action@v3
+  test-php:
+    name: Test on php ${{ matrix.php-version }} and ${{ matrix.os }}
+    runs-on: ${{ matrix.os }}
+    continue-on-error: ${{ matrix.experimental }}
+    strategy:
+      matrix:
+        php-version: ["7.1.3", "7.1", "7.2", "7.3", "7.4", "8.0", "8.1", "8.2", "8.3"]
+        experimental: [false]
+        os: [ubuntu-latest]
+        composer-options: [""]
+        include:
+          - {
+              php-version: "nightly",
+              composer-options: "--ignore-platform-req=php",
+              experimental: true,
+              os: ubuntu-latest,
+            }
+    steps:
+      - uses: actions/checkout@v4
+      - name: Use php ${{ matrix.php-version }}
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: ${{ matrix.php-version }}
+          coverage: xdebug
+      - name: Cache module
+        uses: actions/cache@v3
+        with:
+          path: ~/.composer/cache/
+          key: composer-cache
+      - name: Install dependencies
+        run: composer install --no-interaction --prefer-dist --no-progress ${{ matrix.composer-options }}
+      - name: Run php tests
+        run: composer run test
+      - name: Send coverage
+        uses: codecov/codecov-action@v3