diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index e7db028..0d8ff83 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,6 +1,6 @@
 name: Test
 on:
-  pull_request_target:
+  pull_request:
   push:
     branches:
       - main
@@ -9,6 +9,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       pull-requests: write
     steps:
       - uses: actions/checkout@v6