diff --git a/.github/workflows/pr-gate.yml b/.github/workflows/pr-gate.yml
deleted file mode 100644
index 1bfbc7c2e1e6..000000000000
--- a/.github/workflows/pr-gate.yml
+++ /dev/null
@@ -1,26 +0,0 @@
-name: PR Permission Gate
-on:
-  pull_request_target:
-    branches: [main]
-    types: [opened, reopened, synchronize]
-
-permissions:
-  contents: read
-  pull-requests: read
-
-concurrency:
-  group: pr-gate-${{ github.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  gatekeeper:
-    name: gatekeeper
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout base branch (safe)
-        uses: actions/checkout@v5
-        with:
-          ref: ${{ github.event.pull_request.base.sha }}
-          fetch-depth: 1
-      - name: Run permission gate (from base)
-        uses: ./.github/actions/pr-permission-gate
diff --git a/.github/workflows/pr-sglang.yml b/.github/workflows/pr-sglang.yml
index 9f65d852cd76..01f40a855466 100644
--- a/.github/workflows/pr-sglang.yml
+++ b/.github/workflows/pr-sglang.yml
@@ -2,13 +2,14 @@ name: PR - SGLang
 
 on:
   pull_request:
-    branches:
-      - main
+    branches: [main]
+    types: [opened, reopened, synchronize]
     paths:
       - "**sglang**"
 
 permissions:
   contents: read
+  pull-requests: read
 
 env:
   # CI Image configuration
@@ -23,7 +24,24 @@ env:
   TEST_ARTIFACTS_DIRECTORY: "/test_artifacts/sglang"
 
 jobs:
+  gatekeeper:
+    runs-on: ubuntu-latest
+    concurrency:
+      group: ${{ github.workflow }}-gate-${{ github.event.pull_request.number }}
+      cancel-in-progress: true
+    steps:
+      - name: Checkout base branch (safe)
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          fetch-depth: 1
+
+      - name: Run permission gate (from base)
+        uses: ./.github/actions/pr-permission-gate
+
   check-changes:
+    needs: [gatekeeper]
+    if: success()
     runs-on: ubuntu-latest
     concurrency:
       group: ${{ github.workflow }}-check-changes-${{ github.event.pull_request.number }}
diff --git a/.github/workflows/pr-vllm.yml b/.github/workflows/pr-vllm.yml
index 00368b31feff..41ccb11c7a1d 100644
--- a/.github/workflows/pr-vllm.yml
+++ b/.github/workflows/pr-vllm.yml
@@ -2,13 +2,14 @@ name: PR - vLLM
 
 on:
   pull_request:
-    branches:
-      - main
+    branches: [main]
+    types: [opened, reopened, synchronize]
     paths:
       - "**vllm**"
 
 permissions:
   contents: read
+  pull-requests: read
 
 env:
   # CI Image configuration
@@ -25,7 +26,24 @@ env:
   FORCE_COLOR: "1"
 
 jobs:
+  gatekeeper:
+    runs-on: ubuntu-latest
+    concurrency:
+      group: ${{ github.workflow }}-gate-${{ github.event.pull_request.number }}
+      cancel-in-progress: true
+    steps:
+      - name: Checkout base branch (safe)
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.base.sha }}
+          fetch-depth: 1
+
+      - name: Run permission gate (from base)
+        uses: ./.github/actions/pr-permission-gate
+
   check-changes:
+    needs: [gatekeeper]
+    if: success()
     runs-on: ubuntu-latest
     concurrency:
       group: ${{ github.workflow }}-check-changes-${{ github.event.pull_request.number }}