diff --git a/.github/workflows/appimage.yml b/.github/workflows/appimage.yml
index 16b0a7b9b4..1e65603838 100644
--- a/.github/workflows/appimage.yml
+++ b/.github/workflows/appimage.yml
@@ -2,7 +2,7 @@ name: Generate Linux AppImage
 on:
   push:
     branches:
-    - '**'
+    - master
     # For testing.
     #- test_arch
     tags:
@@ -12,7 +12,7 @@ on:
     - 'Tools/**'
     - '.{editorconfig,gitattributes,gitignore}'
     - 'appveyor.yml'
-  pull_request_target:
+  pull_request:
     branches:
     - master
     paths-ignore:
@@ -26,10 +26,6 @@ env:
   #SDL_VIDEODRIVER: "dummy"
   #BUILD_CONFIGURATION: Release #RelWithDebInfo
 
-permissions:
-  contents: read
-  pull-requests: read
-
 jobs:
   build:
     name: build (${{ matrix.id }})
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 35227b6d0e..9752f4bb20 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -3,7 +3,7 @@ name: Build
 on:
   push:
     branches:
-    - '**'
+    - master
     # For testing.
     - actions
     tags:
@@ -13,7 +13,7 @@ on:
     - 'Tools/**'
     - '.{editorconfig,gitattributes,gitignore}'
     - 'appveyor.yml'
-  pull_request_target:
+  pull_request:
     branches:
     - master
     paths-ignore:
@@ -25,10 +25,6 @@ on:
 env:
   BUILD_CONFIGURATION: Release
 
-permissions:
-  contents: read
-  pull-requests: read
-
 jobs:
   build-windows:
     strategy: