diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 47b1667..fd1b5a4 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -1,8 +1,12 @@
 name: format
 
 on:
-  - push
-  - pull_request
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
 
 jobs:
   prettier:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 65d0e36..fbca609 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,8 +1,12 @@
 name: test
 
 on:
-  - push
-  - pull_request
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
 
 jobs:
   jest: