diff --git a/.github/workflows/maintenance.yaml b/.github/workflows/maintenance.yaml
index 2c335f6..831f9a1 100644
--- a/.github/workflows/maintenance.yaml
+++ b/.github/workflows/maintenance.yaml
@@ -14,7 +14,9 @@ jobs:
       - uses: actions/setup-python@v3
         with:
           python-version: "3.10"
-      - run: pip install '.[scraper]'
+          cache: pip
+          cache-dependency-path: pyproject.toml
+      - run: pip install --upgrade --no-input '.[scraper]'
       - run: cd scripts && ./scrape_checks.py
       - uses: peter-evans/create-pull-request@v4
         with:
diff --git a/.github/workflows/test-action.yaml b/.github/workflows/test-action.yaml
index 3c858c1..d6247b1 100644
--- a/.github/workflows/test-action.yaml
+++ b/.github/workflows/test-action.yaml
@@ -2,6 +2,11 @@ name: Test Action
 
 on: [push]
 
+permissions:
+  security-events: write
+  actions: read
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index b66296c..5c3b114 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -21,8 +21,10 @@ jobs:
       uses: actions/setup-python@v3
       with:
         python-version: ${{ matrix.python-version }}
+        cache: pip
+        cache-dependency-path: pyproject.toml
     - name: test
       run: |
-        python -m pip install --upgrade pip
-        pip install tox tox-gh-actions
+        python -m pip install --upgrade --no-input pip
+        python -m pip install --upgrade --no-input tox tox-gh-actions
         tox