diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 26e8b5c8..d8d13a74 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -1,4 +1,5 @@
 name: Continuous Integration
+permissions: read-all
 
 on: [push, pull_request]
 
@@ -9,7 +10,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with:
-          node-version: "14"
+          node-version: "20"
       - run: npm install
       - run: grunt check
         working-directory: ./scripts
@@ -32,7 +33,7 @@ jobs:
       - uses: actions/checkout@v2
       - uses: actions/setup-node@v2
         with:
-          node-version: "14"
+          node-version: "20"
       - run: npm install
       - name: Run test cases
         env: