diff --git a/.github/workflows/powershell-pr-check.yml b/.github/workflows/powershell-pr-check.yml
index b051939da33e..cf0c7d713a0c 100644
--- a/.github/workflows/powershell-pr-check.yml
+++ b/.github/workflows/powershell-pr-check.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'microsoft/codeql'
     permissions:
-      contents: write
+      contents: read
     steps:
       - name: Checkout
         uses: actions/checkout@v3
diff --git a/.github/workflows/sync-main.yml b/.github/workflows/sync-main.yml
index cacc4669a926..99526286026b 100644
--- a/.github/workflows/sync-main.yml
+++ b/.github/workflows/sync-main.yml
@@ -2,7 +2,6 @@ name: Sync Main
 on:
   schedule:
     - cron:  '55 * * * *'
-  workflow_dispatch:
 jobs:
   sync-main:
     name: Sync-main