diff --git a/.github/workflows/dev-release.yml b/.github/workflows/dev-release.yml
deleted file mode 100644
index 181df563e..000000000
--- a/.github/workflows/dev-release.yml
+++ /dev/null
@@ -1,66 +0,0 @@
-# Copyright The Notary Project Authors.
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-# http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-name: dev-release
-
-on:
-  schedule:
-    - cron: '0 16 * * 0'  # at 16:00 on Sunday (UTC)
-  workflow_dispatch:
-
-jobs:
-  build:
-    name: Weekly Release Notation Binaries
-    runs-on: ubuntu-20.04
-    strategy:
-      matrix:
-        go-version: ['1.20']
-      fail-fast: true
-    steps:
-      - name: Set up Go ${{ matrix.go-version }}
-        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
-        with:
-          go-version: ${{ matrix.go-version }}
-          check-latest: true
-      - name: Checkout
-        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
-        with:
-          fetch-depth: 0
-      - name: Set Git User
-        run: |
-          git config user.name "${GITHUB_ACTOR}"
-          git config user.email "${GITHUB_ACTOR}@users.noreply.github.com"
-      - name: Create Version Tag
-        run: |
-          # get project version: <SemVer>.dev.<YYYYMMDD>
-          export TAG_VERSION=`cat ./internal/version/version.go | grep "Version = " | awk -F '"' '{print $2}'`.dev.`date +%Y%m%d`
-
-          # create new tag
-          git tag -af $TAG_VERSION -m "For weekly build"
-          git push origin $TAG_VERSION
-      - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@5fdedb94abba051217030cc86d4523cf3f02243d # v4.6.0
-        with:
-          distribution: goreleaser
-          version: latest
-          args: release -f ./.dev.goreleaser.yml --rm-dist
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - name: Delete old dev release
-        uses: dev-drprasad/delete-older-releases@653dc03d96473ac9e585c68c8bf5aaccb0dadb61 # v0.2.1
-        with:
-          keep_latest: 1
-          delete_tag_pattern: ".dev."
-          delete_tags: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/license-checker.yml b/.github/workflows/license-checker.yml
index 71f99530f..07303f82e 100644
--- a/.github/workflows/license-checker.yml
+++ b/.github/workflows/license-checker.yml
@@ -20,9 +20,11 @@ on:
     branches: main
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 
 jobs:
   check-license:
+    permissions:
+      contents: write
+      pull-requests: write
     uses: notaryproject/notation-core-go/.github/workflows/reusable-license-checker.yml@main
\ No newline at end of file