diff --git a/.github/workflows/functions.yaml b/.github/workflows/functions.yaml
index 7a5b0f5857..ee24d1a194 100644
--- a/.github/workflows/functions.yaml
+++ b/.github/workflows/functions.yaml
@@ -247,12 +247,12 @@ jobs:
   test-e2e-podman:
     name: E2E - Podman
     needs: precheck
-    runs-on: ubuntu-latest
     strategy:
       matrix:
         os:
           - "ubuntu-latest" # x86_64
           - "ubuntu-24.04-arm" # ARM64
+    runs-on: ${{ matrix.os }}
     env:
       FUNC_CLUSTER_RETRIES: 5
       FUNC_E2E_PODMAN: true
diff --git a/.github/workflows/test-podman-next.yaml b/.github/workflows/test-podman-next.yaml
index 8a786f528c..b40b62f650 100644
--- a/.github/workflows/test-podman-next.yaml
+++ b/.github/workflows/test-podman-next.yaml
@@ -1,5 +1,8 @@
 name: Func Podman Next Test
 
+permissions:
+  contents: read
+
 on:
   schedule:
     - cron: '0 2 * * *'