diff --git a/.github/workflows/release-branches.yml b/.github/workflows/release-branches.yml
index 5c702ad..fbdd4b2 100644
--- a/.github/workflows/release-branches.yml
+++ b/.github/workflows/release-branches.yml
@@ -6,8 +6,6 @@ on:
       # NOTE: make sure any branches here are also valid directory names,
       # otherwise creating the directory and uploading to s3 will fail
       - "main"
-      - "flakehub-cache"
-
 
 jobs:
   build:
diff --git a/README.md b/README.md
index 13b6182..8ddca75 100644
--- a/README.md
+++ b/README.md
@@ -41,6 +41,9 @@ on:
 jobs:
   check:
     runs-on: ubuntu-22.04
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v3
       - uses: DeterminateSystems/nix-installer-action@main
@@ -127,4 +130,3 @@ You can read the full privacy policy for [Determinate Systems][detsys], the crea
 [attic]: https://github.com/zhaofengli/attic
 [colmena]: https://github.com/zhaofengli/colmena
 [z2n]: https://zero-to-nix.com
-