diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml
index 1fb8e9a..9314001 100644
--- a/.github/workflows/auto-tag.yml
+++ b/.github/workflows/auto-tag.yml
@@ -26,7 +26,6 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          ref: ${{ github.event.workflow_run.head_sha }}
           persist-credentials: false
       
       - name: Check for skip keyword
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 826bd17..7c8c76e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,9 @@ on:
   pull_request:
     branches: [ main, master ]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Build and Test