diff --git a/.github/workflows/testTKG.yml b/.github/workflows/testTKG.yml
index 43a15623..40d781ca 100644
--- a/.github/workflows/testTKG.yml
+++ b/.github/workflows/testTKG.yml
@@ -4,10 +4,15 @@ on:
     types: [created]
 jobs:
   testTKG:
+    permissions:
+        id-token: write
+        contents: read
+        issues: write
+        pull-requests: write
     runs-on: ubuntu-latest
     if: startsWith(github.event.comment.body, 'run tkg-test')
     steps:
-      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
         with:
           ref: refs/pull/${{ github.event.issue.number }}/head