diff --git a/.github/workflows/build-pull-requests.yml b/.github/workflows/build-pull-requests.yml
index e34c1969..061a946f 100644
--- a/.github/workflows/build-pull-requests.yml
+++ b/.github/workflows/build-pull-requests.yml
@@ -19,7 +19,7 @@ on:
   pull_request:
     branches:
       - main
-      - 'develop**'
+      - 'develop/**'
       - 'release/**'
     paths:
       - '**.h'
@@ -32,12 +32,15 @@ on:
 
 jobs:
   test:
+    permissions:
+      pull-requests: write
+      checks: write
     name: Run tests
     uses: ./.github/workflows/test.yml
+    
   build:
     name: Build
     runs-on: windows-latest
-
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 218ae865..a3f9c20e 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -42,19 +42,20 @@ on:
         type: string
         
 permissions:
-  contents: read
   id-token: write
   packages: write
   
 jobs:
   test:
+    permissions:
+      pull-requests: write
+      checks: write
     name: Run tests
     uses: ./.github/workflows/test.yml
-    
+
   build:
     name: Build, save artefacts
     runs-on: windows-2019
-
     steps:
       # Checkout the local repository
       - uses: actions/checkout@v4
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index a1f198b0..c8312df4 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -88,7 +88,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
-      contents: read
       checks: write
     needs: coverage 
     if: github.event_name == 'pull_request'
@@ -111,7 +110,6 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       pull-requests: write
-      contents: read
       checks: write
     needs: [test-windows, test-ubuntu, test-macOS] 
     if: github.event_name == 'pull_request'