diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 74e6d77..1e7758c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   build-test:
     if: github.repository == 'akka/akka-http-quickstart-java.g8'
@@ -13,15 +16,21 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        # https://github.com/actions/checkout/releases
+        # v4.1.1
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
 
       - name: Set up JDK 17
-        uses: coursier/setup-action@v1.3.0
+        # https://github.com/coursier/setup-action/releases
+        # v1.3.5
+        uses: coursier/setup-action@7bde40eee928896f074dbb76d22dd772eed5c65f
         with:
           jvm: temurin:1.17
 
       - name: Cache Coursier cache
-        uses: coursier/cache-action@v6.4.0
+        # https://github.com/coursier/cache-action/releases
+        # v6.4.5
+        uses: coursier/cache-action@1ff273bff02a8787bc9f1877d347948af647956d
 
       - name: sbt & Paradox
         run: sbt test docs/paradox
diff --git a/README.md b/README.md
index fce31ca..cb5fecc 100644
--- a/README.md
+++ b/README.md
@@ -1,5 +1,7 @@
 ## Akka HTTP quickstart in Java
 
+The Akka family of projects is managed by teams at [Lightbend](https://lightbend.com/) with help from the community.
+
 Please see the [quickstart guide](https://developer.lightbend.com/guides/akka-http-quickstart-java/) for a
 walk through the code.