diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 41154f07..0cdb5a3e 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -17,6 +17,10 @@ on:
   pull_request:
     # The branches below must be a subset of the branches above
     branches: ["main"]
+    paths:
+      - "**.go"
+      - "go.mod"
+      - ".github/workflows/codeql.yml"
   schedule:
     - cron: "0 0 * * 1"
 
diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
index 27d1ef96..12ba3e30 100644
--- a/.github/workflows/golangci-lint.yml
+++ b/.github/workflows/golangci-lint.yml
@@ -4,9 +4,14 @@ on:
     tags:
       - v*
     branches:
-      - master
       - main
   pull_request:
+    branches:
+      - main
+    paths:
+      - "**.go"
+      - "go.mod"
+      - ".github/workflows/golangci-lint.yml"
 permissions:
   contents: read
   pull-requests: read
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index be97e8a4..5230a418 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,7 +13,19 @@
 # limitations under the License.
 
 name: release
-on: [push, pull_request]
+on:
+  push:
+    tags:
+      - v*
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+    paths-ignore:
+      - "**.md"
+      - "docs/**"
+      - "docs-site/**"
 
 permissions:
   contents: read  # This is required for actions/checkout