diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 6371f4c..722206a 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -17,6 +17,9 @@ on:
     branches:
       - "main" # only PRs against main
 
+permissions:
+  contents: read
+
 jobs:
   docker:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
index eb4ad62..29f81c6 100644
--- a/.github/workflows/sonar.yml
+++ b/.github/workflows/sonar.yml
@@ -1,3 +1,5 @@
+name: Sonar
+
 on:
   # Trigger analysis when pushing in main or pull requests, and when creating a pull request.
   push:
@@ -5,7 +7,10 @@ on:
       - main
   pull_request:
       types: [opened, synchronize, reopened]
-name: Sonar
+
+permissions:
+  contents: read
+
 jobs:
   sonarcloud:
     runs-on: ubuntu-latest
diff --git a/aliexpress.js b/aliexpress.js
index e2439a4..52e75a0 100644
--- a/aliexpress.js
+++ b/aliexpress.js
@@ -40,7 +40,7 @@ const auth = async (url) => {
   console.log('auth', url);
   await page.goto(url, { waitUntil: 'domcontentloaded' });
   // redirects to https://login.aliexpress.com/?return_url=https%3A%2F%2Fwww.aliexpress.com%2Fp%2Fcoin-pc-index%2Findex.html
-  await Promise.any([page.waitForURL(/.*login.aliexpress.com.*/).then(async () => {
+  await Promise.any([page.waitForURL(/.*login\.aliexpress.com.*/).then(async () => {
     // manual login
     console.error('Not logged in! Will wait for 120s for you to login...');
     // await page.waitForTimeout(120*1000);