diff --git a/.github/workflows/binary-cache.yaml b/.github/workflows/binary-cache.yaml
index b8002ca..c923405 100644
--- a/.github/workflows/binary-cache.yaml
+++ b/.github/workflows/binary-cache.yaml
@@ -1,7 +1,10 @@
 name: "Binary Cache"
 on:
-  pull_request:
   push:
+    paths:
+      - config/*
+      - *.nix
+
 jobs:
   binary-cache:
     strategy:
diff --git a/.github/workflows/sync.yaml b/.github/workflows/sync.yaml
index a2a45e9..c456c8a 100644
--- a/.github/workflows/sync.yaml
+++ b/.github/workflows/sync.yaml
@@ -3,6 +3,8 @@ on:
   push:
     branches:
       - main
+    paths:
+      - config/*
 
 jobs:
   build:
diff --git a/.github/workflows/template-darwin-system.yaml b/.github/workflows/template-darwin-system.yaml
index 2ab74c5..89f579a 100644
--- a/.github/workflows/template-darwin-system.yaml
+++ b/.github/workflows/template-darwin-system.yaml
@@ -4,11 +4,10 @@ on:
     paths:
       - .github/workflows/template-darwin-system.yaml
       - templates/darwin-system/*
+      - config/*
 
 jobs:
   template-test:
-    permissions:
-      contents: write
     runs-on: macos-latest
     steps:
     - uses: "actions/checkout@v4"