diff --git a/.github/workflows/eval.yml b/.github/workflows/eval.yml
index 7efa71913ac7..0acf37476ecc 100644
--- a/.github/workflows/eval.yml
+++ b/.github/workflows/eval.yml
@@ -18,8 +18,6 @@ on:
     secrets:
       CACHIX_AUTH_TOKEN:
         required: true
-      OWNER_APP_PRIVATE_KEY:
-        required: false
 
 permissions: {}
 
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 3fcb35bfacc7..82fdd1f3aa82 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -80,7 +80,6 @@ jobs:
       statuses: write
     secrets:
       CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
-      OWNER_APP_PRIVATE_KEY: ${{ secrets.OWNER_APP_PRIVATE_KEY }}
     with:
       mergedSha: ${{ needs.prepare.outputs.mergedSha }}
       targetSha: ${{ needs.prepare.outputs.targetSha }}
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 4031c3a9cc6f..e980dbe42951 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -39,8 +39,6 @@ jobs:
     # Those are not actually used on push, but will throw an error if not set.
     permissions:
       # compare
-      issues: write
-      pull-requests: write
       statuses: write
     secrets:
       CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}