diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index e0289b28..3fab805b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -53,7 +53,9 @@ jobs:
           pip install tox==4.26.0
 
       - name: Run tox
-        run: tox -e ${{ matrix.name }}
+        run: tox -e "${MATRIX_NAME}"
+        env:
+          MATRIX_NAME: ${{ matrix.name }}
 
       - name: Report coverage
         if: contains(matrix.name, 'coverage')
diff --git a/tox.ini b/tox.ini
index fe0e228b..ccd5e381 100644
--- a/tox.ini
+++ b/tox.ini
@@ -48,7 +48,7 @@ commands =
     ruff check --diff {posargs:pytest_django pytest_django_test tests}
     ruff format --quiet --diff {posargs:pytest_django pytest_django_test tests}
     mypy {posargs:pytest_django pytest_django_test tests}
-    zizmor --persona=regular .github/workflows/deploy.yml .github/workflows/main.yml
+    zizmor --persona=pedantic .github/workflows/deploy.yml .github/workflows/main.yml
 
 [testenv:doc8]
 basepython = python3