diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 107beb4..0428f35 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,6 +2,8 @@ name: ci
 on:
   push:
   pull_request:
+permissions:
+  contents: read
 jobs:
   test:
     strategy:
diff --git a/internal/tui/infoview.go b/internal/tui/infoview.go
index 6c31444..ed3da63 100644
--- a/internal/tui/infoview.go
+++ b/internal/tui/infoview.go
@@ -110,7 +110,7 @@ func (v *infoView) paint(m *Model, cv *Canvas, r treemap.Rect) {
 	}
 	line("Exclusions", excl, value)
 	line("One filesystem", fmt.Sprint(st.OneFileSystem), value)
-	line("Follow symlinks", st.Follow, value)
+	line("Follow symlinks", textutil.Sanitize(st.Follow), value)
 	line("Size mode", m.sizeMode.String(), value)
 	units := "IEC (1024)"
 	if textutil.SI {