diff --git a/.github/workflows/nix-wallet-connections-validation.yml b/.github/workflows/nix-wallet-connections-validation.yml
index 22f04e2..ecc6201 100644
--- a/.github/workflows/nix-wallet-connections-validation.yml
+++ b/.github/workflows/nix-wallet-connections-validation.yml
@@ -5,6 +5,9 @@ on:
   pull_request:
     branches: [ main ]
 
+permissions:
+  contents: read
+
 jobs:
   validate:
     runs-on: ubuntu-latest
diff --git a/nix/tests/nwc-wallets-port-collision.nix b/nix/tests/nwc-wallets-port-collision.nix
index e613a70..cb86a3e 100644
--- a/nix/tests/nwc-wallets-port-collision.nix
+++ b/nix/tests/nwc-wallets-port-collision.nix
@@ -118,8 +118,8 @@ pkgs.testers.runNixOSTest {
     machine.succeed("ss -ltn '( sport = :18080 )' | grep -F '127.0.0.1:18080'")
     machine.succeed("ss -ltn '( sport = :8181 )' | grep -F '127.0.0.1:8181'")
 
-    machine.fail("ss -ltn '( sport = :18080 )' | grep -E '0\\\\.0\\\\.0\\\\.0:18080|\\[::\\]:18080'")
-    machine.fail("ss -ltn '( sport = :8181 )' | grep -E '0\\\\.0\\\\.0\\\\.0:8181|\\[::\\]:8181'")
+    machine.fail("ss -ltn '( sport = :18080 )' | grep -E '0\\.0\\.0\\.0:18080|\\[::\\]:18080'")
+    machine.fail("ss -ltn '( sport = :8181 )' | grep -E '0\\.0\\.0\\.0:8181|\\[::\\]:8181'")
 
     machine.succeed("${pkgs.curl}/bin/curl --fail --silent http://127.0.0.1:18080/api/info | ${pkgs.gnugrep}/bin/grep -q 'setupCompleted'")