diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index c6e6f67..eecf789 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,7 +11,10 @@ on:
 
 env:
   FORCE_COLOR: 2
-  NODE: 18 # The Node.js version to run lint on
+  NODE: 20 # The Node.js version to run lint on
+
+permissions:
+  contents: read
 
 jobs:
   run:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 082a8b9..6e8099b 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -12,6 +12,9 @@ on:
 env:
   FORCE_COLOR: 2
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Node ${{ matrix.node }} on ${{ matrix.os }}
@@ -20,8 +23,13 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest, windows-latest]
-        node: [12, 14, 16, 18]
+        os: [ubuntu-latest]
+        node: [12, 14, 16, 18, 20]
+        include:
+          - os: macos-latest
+            node: 18
+          - os: windows-latest
+            node: 18
 
     steps:
       - name: Clone repository