diff --git a/.github/workflows/cloud-runner-async-checks.yml b/.github/workflows/cloud-runner-async-checks.yml
index 921cc442..a506a011 100644
--- a/.github/workflows/cloud-runner-async-checks.yml
+++ b/.github/workflows/cloud-runner-async-checks.yml
@@ -43,8 +43,6 @@ jobs:
         uses: actions/checkout@v2
         with:
           lfs: false
-      - run: yarn
-      - run: yarn run cli --help
       - run: yarn run cli -m checks-update
         timeout-minutes: 180
         env:
diff --git a/.github/workflows/cloud-runner-pipeline.yml b/.github/workflows/cloud-runner-pipeline.yml
index 1b2089c4..df6386d2 100644
--- a/.github/workflows/cloud-runner-pipeline.yml
+++ b/.github/workflows/cloud-runner-pipeline.yml
@@ -4,7 +4,9 @@ on:
   push: { branches: [cloud-runner-develop, cloud-runner-preview, main] }
   workflow_dispatch:
 
-permissions: write-all
+permissions:
+  checks: write
+  workflows: write
 
 env:
   GKE_ZONE: 'us-central1'