diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
index 6272e9f..ea07a4c 100644
--- a/.github/workflows/check.yml
+++ b/.github/workflows/check.yml
@@ -3,6 +3,12 @@ on:
   schedule:
     - cron: 0 0 * * *
   pull_request:
+
+permissions:
+  contents: write
+  pull-requests: write
+  checks: write
+
 jobs:
   verify:
     runs-on: ubuntu-latest
@@ -22,29 +28,9 @@ jobs:
           - ubuntu-latest
           - macos-latest
           - windows-latest
-        include:
-          - system: ubuntu-18.04
-            container: ubuntu:18.04
     runs-on: ${{ matrix.system }}
-    container: ${{ matrix.container }}
     steps:
-      - name: install deps
-        if: matrix.container == 'ubuntu:18.04'
-        run: |
-          apt update
-          apt install -y software-properties-common
-          add-apt-repository ppa:git-core/ppa
-          apt update
-          apt install -y git fontconfig make gcc pkg-config
-
-      - uses: actions/checkout@v2
-      - uses: actions/setup-node@v2
-        if:
-          matrix.container == 'ubuntu:18.04' || matrix.system ==
-          'windows-latest'
-        with:
-          node-version: '16'
-
+      - uses: actions/checkout@v3
       - run: npm ci
       - run: npm run lint
       - run: npm run test
@@ -78,5 +64,5 @@ jobs:
           REPO_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           echo 'Hello CML from ${{ matrix.system }}!' > report.md
-          cml comment create report.md
+          cml comment create ${{ github.event_name == 'pull_request' && '--target=pr' }} report.md
           cml check create report.md