diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index eb0494b6..20006e3b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,9 +14,6 @@ jobs:
     name: Check formatting
     runs-on: ubuntu-latest
 
-    permissions:
-      contents: read
-
     steps:
       - uses: actions/checkout@v4
 
@@ -34,9 +31,6 @@ jobs:
     name: Test Modules
     runs-on: ubuntu-latest
 
-    permissions:
-      contents: read
-
     steps:
       - uses: actions/checkout@v4
 
@@ -48,4 +42,4 @@ jobs:
 
       - name: Run VM
         run: |
-          nix build -L --show-trace ./dev#checks.x86_64-linux.module-vm-test
+          nix build --print-build-logs --show-trace ./dev#checks.x86_64-linux.module-vm-test
diff --git a/.github/workflows/update-docs.yml b/.github/workflows/update-docs.yml
index 1d8ddf11..adcb14f4 100644
--- a/.github/workflows/update-docs.yml
+++ b/.github/workflows/update-docs.yml
@@ -36,7 +36,7 @@ jobs:
       - name: Build & update docs
         run: |
           for module in "nixos" "home-manager"; do
-            nix build -L --show-trace ./dev#"$module"-doc
+            nix build --print-build-logs --show-trace ./dev#"$module"-doc
             cat result > docs/"$module"-options.md
             rm result
           done
diff --git a/.github/workflows/validate-sources.yml b/.github/workflows/validate-sources.yml
index 609b9683..9de16dbf 100644
--- a/.github/workflows/validate-sources.yml
+++ b/.github/workflows/validate-sources.yml
@@ -7,6 +7,7 @@ on:
     paths:
       - '_sources/**'
       - 'nvfetcher.toml'
+    branches: [main]
   pull_request:
     paths:
       - '_sources/**'