diff --git a/{{cookiecutter.__package_slug}}/.github/workflows/pypi.yaml b/{{cookiecutter.__package_slug}}/.github/workflows/pypi.yaml
index 6de86c3..5912d44 100644
--- a/{{cookiecutter.__package_slug}}/.github/workflows/pypi.yaml
+++ b/{{cookiecutter.__package_slug}}/.github/workflows/pypi.yaml
@@ -19,6 +19,7 @@ jobs:
   pypi:
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       id-token: write
     steps:
       - uses: actions/checkout@v6
diff --git a/{{cookiecutter.__package_slug}}/makefile b/{{cookiecutter.__package_slug}}/makefile
index 932c074..d077504 100644
--- a/{{cookiecutter.__package_slug}}/makefile
+++ b/{{cookiecutter.__package_slug}}/makefile
@@ -180,6 +180,9 @@ create_migration:
 
 .PHONY: check_ungenerated_migrations
 check_ungenerated_migrations:
-	$(UV) run alembic check
+	rm -f $(MIGRATION_DATABASE)
+	DATABASE_URL=sqlite:///$(MIGRATION_DATABASE) $(UV) run alembic upgrade head
+	DATABASE_URL=sqlite:///$(MIGRATION_DATABASE) $(UV) run alembic check
+	rm -f $(MIGRATION_DATABASE)
 
 {% endif %}