diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ed9e3e4..f0b905c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,10 +3,18 @@ name: CI
 on:
   workflow_call:
   push:
+    branches:
+      - 'main'
   pull_request:
 
 # Declare default permissions as read only.
-permissions: read-all
+permissions:
+  # Required: allow read access to the content for analysis.
+  contents: read
+  # Optional: allow read access to pull request. Use with `only-new-issues` option.
+  pull-requests: read
+  # Optional: Allow write access to checks to allow the action to annotate code in the PR.
+  checks: write
 
 jobs:
   unit_tests:
@@ -30,4 +38,5 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@3cfe3a4abbb849e10058ce4af15d205b6da42804 # v4.0.0
         with:
-          version: v1.55.2
+          version: v1.56.2
+          skip-cache: true