diff --git a/.github/workflows/create-plugin-pr.yml b/.github/workflows/create-plugin-pr.yml
index 3c71504..c864517 100644
--- a/.github/workflows/create-plugin-pr.yml
+++ b/.github/workflows/create-plugin-pr.yml
@@ -16,6 +16,7 @@ jobs:
     steps:
       - uses: actions/github-script@v9
         with:
+          retries: 3
           script: |
             const body = context.payload.issue.body ?? '';
             const issueNumber = context.payload.issue.number;
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index c03b5ee..20bc678 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -68,6 +68,11 @@ jobs:
         with:
           ref: ${{ github.event.pull_request.head.sha || github.ref }}
           fetch-depth: 0
+          persist-credentials: false
+          # Deploy from fork PRs only runs after a maintainer explicitly adds the
+          # '🚀request-deploy' label (gated by the job's `if` condition above), so
+          # opting in to fork checkout here is an intentional, reviewed trust boundary.
+          allow-unsafe-pr-checkout: true
 
       - name: Remove built-in Yarn
         run: npm uninstall -g yarn