diff --git a/.github/workflows/shellcheck.yml b/.github/workflows/shellcheck.yml
index a9cc06f..d2aae74 100644
--- a/.github/workflows/shellcheck.yml
+++ b/.github/workflows/shellcheck.yml
@@ -28,10 +28,12 @@ on:
 
 jobs:
   shellcheck:
-    name: Bash syntax checker
-    runs-on: ubuntu-latest
+    name: Shell syntax checker
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: read
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Run ShellCheck
-        uses: ludeeus/action-shellcheck@master
\ No newline at end of file
+        uses: ludeeus/action-shellcheck@master