diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index b5f07302..601d7247 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,6 +1,6 @@
 name: Tests
 on:
-  pull_request_target: # zizmor: ignore[dangerous-triggers]
+  pull_request:
   push:
     branches:
       - main
@@ -13,6 +13,8 @@ jobs:
     environment: staging
     permissions:
       checks: write
+      contents: read
+      security-events: write
     steps:
       - name: "build: checkout the latest changes"
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -245,7 +247,7 @@ jobs:
           PAYLOAD_FILE_OUTPUT_TIME: ${{ steps.payload_file.outputs.time }}
 
       - name: "chore(health): check up on recent changes to the health score"
-        uses: slackapi/slack-health-score@d58a419f15cdaff97e9aa7f09f95772830ab66f7 # v0.1.1
+        uses: slackapi/slack-health-score@5f8af1380f3d43084c3a99d03dbb844fe0fb3ab9 # v0.2.0-rc.5
         with:
           codecov_token: ${{ secrets.CODECOV_API_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}