diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fff87387415..e5c42b40d56 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,11 +1,19 @@
 name: Quality
-on:
-  pull_request:
-concurrency: ${{ github.workflow }}-${{ github.ref }}
+
+on: pull_request
+
 jobs:
   quality:
+
     name: Ensure Quality
+
     runs-on: ubuntu-latest
+
+    timeout-minutes: 30
+
+    permissions:
+      contents: 'read'
+
     strategy:
       fail-fast: false
       matrix:
@@ -13,28 +21,35 @@ jobs:
         - lint
         - test:unit
         - test:integration
+
     steps:
+
       - name: Checkout Repo
         uses: actions/checkout@v2
+
       - name: Setup pnpm 7
         uses: pnpm/action-setup@v2
         with:
           version: 7
+
       - name: Setup Node.js 16.x
         uses: actions/setup-node@v2
         with:
           node-version: 16.x
+
       - uses: pnpm/action-setup@v2
         name: Install pnpm
         id: pnpm-install
         with:
           version: 7
           run_install: false
+
       - name: Get pnpm store directory
         id: pnpm-cache
         shell: bash
         run: |
           echo "STORE_PATH=$(pnpm store path)" >> $GITHUB_OUTPUT
+
       - uses: actions/cache@v3
         name: Setup pnpm cache
         with:
@@ -42,9 +57,11 @@ jobs:
           key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
           restore-keys: |
             ${{ runner.os }}-pnpm-store-
+
       - name: Install Dependencies
         id: deps
         run: pnpm install
+
       - name: Check
         id: check
         run: pnpm ${{ matrix.command }}