diff --git a/.github/workflows/lint_and_test.yaml b/.github/workflows/lint_and_test.yaml
index 0a7b64260..feec8fbc3 100644
--- a/.github/workflows/lint_and_test.yaml
+++ b/.github/workflows/lint_and_test.yaml
@@ -1,6 +1,10 @@
 name: lint-and-test
 
-on: [ pull_request, push, workflow_dispatch ]
+on: [ pull_request_target, pull_request, push, workflow_dispatch ]
+
+permissions:
+  contents: read
+  pull-requests: read
 
 jobs:
   test: