diff --git a/.github/actions/setup-node/action.yml b/.github/actions/setup-node/action.yml
index 69c865e6..2b29afe3 100644
--- a/.github/actions/setup-node/action.yml
+++ b/.github/actions/setup-node/action.yml
@@ -14,7 +14,7 @@ runs:
       with:
         node-version: ${{ inputs.node-version }}
     - name: Cache Dependencies
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: ./node_modules
         key: ${{ runner.os }}-${{ inputs.node-version }}-modules-${{ hashFiles('**/yarn.lock') }}
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index 27784f70..49a6ea43 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -10,6 +10,11 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+permissions:
+  actions: write
+  contents: read
+  pull-requests: read
+
 jobs:
   build-docs:
     runs-on: ubuntu-latest
@@ -17,7 +22,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: ./.github/actions/setup-node
       - name: Cache .docz folder
-        uses: actions/cache@v2
+        uses: actions/cache@v4
         with:
           path: ./.docz
           key: docz-${{ matrix.node }}-gatsby-v1-${{ github.run_id }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 027187ba..fc53937e 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -6,6 +6,9 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/size-limit.yml b/.github/workflows/size-limit.yml
index 3e79c159..d356ad73 100644
--- a/.github/workflows/size-limit.yml
+++ b/.github/workflows/size-limit.yml
@@ -13,6 +13,10 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+  pull-requests: read
+
 jobs:
   size:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml
index dad5fff1..bc6a8322 100644
--- a/.github/workflows/unit.yml
+++ b/.github/workflows/unit.yml
@@ -6,6 +6,9 @@ concurrency:
   group: ${{ github.ref }}-${{ github.workflow }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   unit:
     runs-on: ubuntu-latest