diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
index 74ba562..a150620 100644
--- a/.github/workflows/check-dist.yml
+++ b/.github/workflows/check-dist.yml
@@ -10,10 +10,12 @@
 name: Check Transpiled JavaScript
 
 on:
+  pull_request:
+    branches:
+      - main
   push:
     branches:
       - main
-  pull_request:
 
 permissions:
   contents: read
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3e9ebdd..6223ad8 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -2,6 +2,8 @@ name: Continuous Integration
 
 on:
   pull_request:
+    branches:
+      - main
   push:
     branches:
       - main
@@ -25,7 +27,7 @@ jobs:
         id: setup-node
         uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
         with:
-          node-version: 18
+          node-version-file: .node-version
           cache: npm
 
       - name: Install Dependencies
@@ -67,4 +69,4 @@ jobs:
           predicate-type: 'https://spdx.dev/Document/v2.3'
           github-token: ${{ secrets.GITHUB_TOKEN }}
       - name: Dump output
-        run: jq < ${{ steps.attest.outputs.bundle-path }}
\ No newline at end of file
+        run: jq < ${{ steps.attest.outputs.bundle-path }}
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 43942bf..b0d0a0b 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -1,10 +1,10 @@
 name: CodeQL
 
 on:
-  push:
+  pull_request:
     branches:
       - main
-  pull_request:
+  push:
     branches:
       - main
   schedule:
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index e1618af..2206107 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -2,6 +2,8 @@ name: Lint Codebase
 
 on:
   pull_request:
+    branches:
+      - main
   push:
     branches:
       - main
@@ -36,7 +38,7 @@ jobs:
 
        - name: Build @actions/attest
         run: npm run build --workspace packages/attest
-        
+
       - name: Lint Codebase
         id: super-linter
         uses: super-linter/super-linter/slim@v6