diff --git a/.github/workflows/build-linux.yml b/.github/workflows/build-linux.yml
index 701c888f..75d55b65 100644
--- a/.github/workflows/build-linux.yml
+++ b/.github/workflows/build-linux.yml
@@ -38,7 +38,7 @@ jobs:
       - run: echo "::remove-matcher owner=uic-problem-matcher::"
 
       - name: Run C++ Linter (clang-tidy)
-        if: strategy.job-index == 0 #run only for first OS of the matrix
+        if: strategy.job-index == 0 && github.event_name == 'pull_request' #run only for first OS of the matrix
         uses: cpp-linter/cpp-linter-action@v2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/make-release.yml b/.github/workflows/make-release.yml
index d466cc4f..4e92b218 100644
--- a/.github/workflows/make-release.yml
+++ b/.github/workflows/make-release.yml
@@ -32,6 +32,9 @@ jobs:
     uses: ./.github/workflows/build-windows.yml
   # linux build is mainly here to check it builds. We have no acrtifact now.
   call-build-linux:
+    permissions:
+      contents: read
+      pull-requests: write
     needs: check-semver
     uses: ./.github/workflows/build-linux.yml