diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml
index b4197d7..2237bf4 100644
--- a/.github/workflows/eslint.yml
+++ b/.github/workflows/eslint.yml
@@ -11,16 +11,24 @@ concurrency:
   group: ${{ github.head_ref || github.run_id }}
   cancel-in-progress: true
 
+permissions: {
+  contents: read
+}
+
 jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
       - name: "☁️ checkout repository"
         uses: actions/checkout@v4
-      - run: npm i
+        with:
+          persist-credentials: false
+
+      - name: '📦 Install NPM Dependencies'
+        run: npm install
 
       - name: "🧹 Run Eslint"
         uses: reviewdog/action-eslint@v1
         with:
           reporter: github-check
-          fail_on_error: true
+          fail_level: 'error'