diff --git a/.github/workflows/assign.yml b/.github/workflows/assign.yml
index 0a427f0..399d66d 100644
--- a/.github/workflows/assign.yml
+++ b/.github/workflows/assign.yml
@@ -2,10 +2,9 @@ name: "Auto Assign"
 run-name: "${{ github.workflow }} (${{ github.ref_name }}): ${{ github.event.pull_request.title }}"
 on:
   pull_request:
-    types:
-      - opened
-      - reopened
-      - ready_for_review
+    types: [opened, reopened, ready_for_review]
+
+permissions: {}
 
 defaults:
   run:
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 86e1add..1621faf 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -14,7 +14,7 @@ defaults:
 jobs:
   setup:
     name: Setup
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     timeout-minutes: 5
     permissions:
       pull-requests: write
@@ -44,25 +44,6 @@ jobs:
             markdown:
               - '**/*.md'
 
-  markdown-lint:
-    name: Markdown lint
-    runs-on: ubuntu-latest
-    timeout-minutes: 5
-    needs: [setup]
-    if: ${{ needs.setup.outputs.markdown == 'true' }}
-    steps:
-      - name: Checkout Repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
-        with:
-          persist-credentials: false
-          sparse-checkout: |
-            ${{ needs.setup.outputs.markdown_files }}
-          sparse-checkout-cone-mode: false
-      - name: Lint
-        uses: DavidAnson/markdownlint-cli2-action@8de2aa07cae85fd17c0b35642db70cf5495f1d25 # v24.0.0
-        with:
-          globs: ${{ needs.setup.outputs.markdown_files }}
-
   lint:
     name: Lint
     runs-on: ubuntu-latest
@@ -73,8 +54,14 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
-      - name: ShellCheck
-        run: find . -type f \( -name 'dot_z*' -o -name '*.sh' -o -name '*.zsh' \) | grep -Ev 'examples/*' | xargs shellcheck
+      - parallel:
+        - name: ShellCheck
+          run: find . -type f \( -name 'dot_z*' -o -name '*.sh' -o -name '*.zsh' \) | grep -Ev 'examples/*' | xargs shellcheck
+        - name: Markdown lint
+          if: ${{ needs.setup.outputs.markdown == 'true' }}
+          uses: DavidAnson/markdownlint-cli2-action@8de2aa07cae85fd17c0b35642db70cf5495f1d25 # v24.0.0
+          with:
+            globs: ${{ needs.setup.outputs.markdown_files }}
 
   test:
     name: Test
@@ -93,7 +80,7 @@ jobs:
     name: Merge Gatekeeper
     runs-on: ubuntu-slim
     timeout-minutes: 2
-    needs: [markdown-lint, test]
+    needs: [test]
     if: ${{ !(failure() || contains(needs.*.result, 'cancelled')) }}
     steps:
       - name: Exit with success