diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
index 9963b1f..40f63a1 100644
--- a/.github/workflows/pr-title.yml
+++ b/.github/workflows/pr-title.yml
@@ -13,4 +13,4 @@ on:
 
 jobs:
   main:
-    uses: getindata/github-workflows/.github/workflows/gh-validate-pr-title.yml@v0.3.1
+    uses: getindata/github-workflows/.github/workflows/gh-validate-pr-title.yml@v1
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 831a570..652dff0 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -1,6 +1,7 @@
 name: TF Pre-Commit
 
-permissions: {}
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -10,7 +11,7 @@ on:
 
 jobs:
   main:
-    uses: getindata/github-workflows/.github/workflows/tf-pre-commit.yml@v0.3.1
+    uses: getindata/github-workflows/.github/workflows/tf-pre-commit.yml@v1
     with:
       # tflint v0.46.0 is the latest version we can use with pre-commit v0.1.20
       # See .pre-commit-config.yaml for more details.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ae78a7f..fb52469 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,4 +10,4 @@ on:
 
 jobs:
   release:
-    uses: getindata/github-workflows/.github/workflows/gh-create-release.yml@v0.3.1
+    uses: getindata/github-workflows/.github/workflows/gh-create-release.yml@v1
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 7e759f2..2c59029 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -18,7 +18,7 @@ repos:
         args: ["."]
 
   - repo: https://github.com/bridgecrewio/checkov.git
-    rev: "2.5.9" # Get the latest from: https://github.com/bridgecrewio/checkov/releases
+    rev: "2.5.13" # Get the latest from: https://github.com/bridgecrewio/checkov/releases
     hooks:
       - id: checkov
         args: [--skip-check, "CKV_TF_1"] # Terraform module sources do not use a git url with a commit hash revision