diff --git a/.github/workflows/linting.yaml b/.github/workflows/linting.yaml
index d07585c..7e05d57 100644
--- a/.github/workflows/linting.yaml
+++ b/.github/workflows/linting.yaml
@@ -6,12 +6,17 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   linting:
     name: Lint artifacts
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
       - shell: bash
         run: |
           shellcheck "${GITHUB_WORKSPACE}"/*.sh
diff --git a/.github/workflows/requirements-tracing.yaml b/.github/workflows/requirements-tracing.yaml
index 5dc14f9..05183dc 100644
--- a/.github/workflows/requirements-tracing.yaml
+++ b/.github/workflows/requirements-tracing.yaml
@@ -6,6 +6,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   tracing:
     name: Run OpenFastTrace
@@ -15,7 +18,9 @@ jobs:
     env:
       REPORT_FILENAME: "requirements-tracing-report.html"
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
 
       - name: Run OpenFastTrace
         id: run-oft
diff --git a/Dockerfile b/Dockerfile
index 6692d40..4f61886 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,8 +3,8 @@ FROM eclipse-temurin:25-jre-alpine
 # alpine comes with sh only, by default
 RUN apk add --no-cache bash
 
-ARG OFT_CORE_VERSION=4.3.0
-ARG OFT_ASCIIDOC_PLUGIN_VERSION=0.3.1
+ARG OFT_CORE_VERSION=4.10.0
+ARG OFT_ASCIIDOC_PLUGIN_VERSION=1.0.0
 
 ENV LIB_DIR=/opt/oft/lib
 
diff --git a/README.md b/README.md
index ea7e8df..a5d9a5f 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 A GitHub Action for tracing requirements using OpenFastTrace.
 
-Runs OpenFastTrace CLI's `trace` command using Temurin JRE 22 on the local workspace.
+Runs OpenFastTrace CLI's `trace` command using Temurin JRE 25 on the local workspace.
 
 The action has the following inputs: