diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c2d60ac0..9188f00f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,9 +5,6 @@ on:
     tags:
       - "v*"
 
-# Declare default permissions as read only.
-permissions: read-all
-
 jobs:
   test:
     uses: Open-CMSIS-Pack/cbuild/.github/workflows/test.yml@main
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f6d5f061..9264df65 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -125,7 +125,7 @@ jobs:
           if-no-files-found: error
 
   publish-test-results:
-    if: github.workflow != 'Release'
+    if: ${{ github.workflow != 'Release' }}
     name: "Publish Tests Results"
     needs: [ test ]
     runs-on: ubuntu-latest
@@ -145,7 +145,7 @@ jobs:
           report_individual_runs: true
 
   coverage:
-    if: github.workflow != 'Release'
+    if: ${{ github.workflow != 'Release' && github.repository == 'Open-CMSIS-Pack/cbuild' }}
     needs: [ test ]
     name: 'Coverage check'
     runs-on: ubuntu-latest