diff --git a/.github/workflows/wc-plan.yaml b/.github/workflows/wc-plan.yaml
index 201449228..3c5d8adef 100644
--- a/.github/workflows/wc-plan.yaml
+++ b/.github/workflows/wc-plan.yaml
@@ -18,7 +18,7 @@ on:
 jobs:
   plan:
     name: "plan (${{matrix.target.target}})"
-    runs-on: ${{fromJSON(matrix.target.runs-on)}}
+    runs-on: ${{matrix.target.runs_on}}
     permissions:
       id-token: write # For OIDC
       contents: read # To checkout private repositories
@@ -66,7 +66,7 @@ jobs:
           # If you use private registries, contents:read is required
           permissions: >-
             {
-              "contents:read"
+              "contents": "read"
             }
           # private repositories hosting private modules
           repositories: >-