diff --git a/.github/workflows/release-dry-run.yml b/.github/workflows/release-dry-run.yml
index f8cd900a2..1ab77ab5e 100644
--- a/.github/workflows/release-dry-run.yml
+++ b/.github/workflows/release-dry-run.yml
@@ -17,10 +17,9 @@ jobs:
   release-dry-run:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         fetch-depth: 0
-        token: ${{ secrets.PAT }}
     - name: Install Knope
       uses: knope-dev/action@v2.0.0
       with:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 7f37a8ba9..63aafd92e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -113,6 +113,8 @@ jobs:
   test-unit:
     name: Test Unit
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write # allows coverage bot to comment
     strategy:
       matrix:
         python-version: ["3.8", "3.9", "3.10", "3.11", "3.12"]
@@ -140,7 +142,7 @@ jobs:
           coverageFile: coverage.xml
           thresholdAll: 0.87
           thresholdNew: 0.9
-          token:  ${{ secrets.PAT }}
+          token:  ${{ secrets.GITHUB_TOKEN }}
 
   check-docker-image:
     name: Check types