diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 6ad7cb6..14d7281 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -10,17 +10,17 @@ on:
   schedule:
     - cron: '31 7 * * 3'
 
+permissions:
+  actions: read
+  checks: write
+  contents: read
+  security-events: write
+
 jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
 
-    permissions:
-      actions: read
-      checks: write
-      contents: read
-      security-events: write
-
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/functional.yml b/.github/workflows/functional.yml
index 7dc2f4f..e1e84e8 100644
--- a/.github/workflows/functional.yml
+++ b/.github/workflows/functional.yml
@@ -3,6 +3,8 @@ on:
   schedule:
     - cron: '0 2 * * 6'
 
+permissions: {}
+
 jobs:
   functional:
     strategy:
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index dafff7b..428ca1b 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -20,6 +20,8 @@ jobs:
       - name: Checkout
         id: checkout
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
 
       - name: Setup Node.js
         id: setup-node
@@ -34,7 +36,7 @@ jobs:
 
       - name: Lint Codebase
         id: super-linter
-        uses: super-linter/super-linter/slim@v5
+        uses: super-linter/super-linter/slim@v6
         env:
           DEFAULT_BRANCH: main
           FILTER_REGEX_EXCLUDE: dist/**/*
diff --git a/script/release b/script/release
index 0dd6139..8940bed 100755
--- a/script/release
+++ b/script/release
@@ -22,8 +22,8 @@ latest_tag=$(git describe --tags "$(git rev-list --tags --max-count=1)")
 
 # if the latest_tag is empty, then there are no tags - let the user know
 if [[ -z "$latest_tag" ]]; then
-    echo -e "No tags found (yet) - continue to create your first tag and push it"
-    latest_tag="[unknown]"
+	echo -e "No tags found (yet) - continue to create your first tag and push it"
+	latest_tag="[unknown]"
 fi
 
 echo -e "The latest release tag is: ${BLUE}${latest_tag}${OFF}"
@@ -31,10 +31,10 @@ read -r -p 'New Release Tag (vX.X.X format): ' new_tag
 
 tag_regex='v[0-9]+\.[0-9]+\.[0-9]+$'
 if echo "$new_tag" | grep -q -E "$tag_regex"; then
-    echo -e "Tag: ${BLUE}$new_tag${OFF} is valid"
+	echo -e "Tag: ${BLUE}$new_tag${OFF} is valid"
 else
-    echo -e "Tag: ${BLUE}$new_tag${OFF} is ${RED}not valid${OFF} (must be in vX.X.X format)"
-    exit 1
+	echo -e "Tag: ${BLUE}$new_tag${OFF} is ${RED}not valid${OFF} (must be in vX.X.X format)"
+	exit 1
 fi
 
 git tag -a "$new_tag" -m "$new_tag Release"