diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index a104049..9d6581f 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -1,7 +1,6 @@
 name: Build artifacts
 
 on:
-  pull_request:
   workflow_dispatch:
   workflow_call:
 
diff --git a/.github/workflows/release-branches.yml b/.github/workflows/release-branches.yml
index 7c29338..7ccb9af 100644
--- a/.github/workflows/release-branches.yml
+++ b/.github/workflows/release-branches.yml
@@ -1,8 +1,7 @@
 name: Release Branch
 
 on:
-  workflow_run:
-    workflows: ["Build artifacts"]
+  push:
     branches:
       # NOTE: make sure any branches here are also valid directory names,
       # otherwise creating the directory and uploading to s3 will fail
@@ -20,6 +19,7 @@ jobs:
     concurrency: release
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       id-token: write # In order to request a JWT for AWS auth
     steps:
       - name: Checkout
diff --git a/.github/workflows/release-tags.yml b/.github/workflows/release-tags.yml
index 2eef44e..1afb1c9 100644
--- a/.github/workflows/release-tags.yml
+++ b/.github/workflows/release-tags.yml
@@ -1,14 +1,6 @@
 name: Release Tags
 
 on:
-  workflow_run:
-    workflows: ["Build artifacts"]
-    branches:
-      # NOTE: make sure any branches here are also valid directory names,
-      # otherwise creating the directory and uploading to s3 will fail
-      - "main"
-    types:
-      - completed
   push:
     tags:
       - "v*.*.*"