diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 1f6b5e2..fdb7bbe 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -4,11 +4,13 @@ on:
     push:
         branches-ignore:
             - "dependabot/**"
-    pull_request_target:
+    pull_request:
         branches-ignore:
             - "main"
     workflow_dispatch:
 
+permissions: write-all
+
 jobs:
     verify:
         permissions: write-all