diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 755d8f3..c65c3ab 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -28,11 +28,11 @@ on:
 
 jobs:
   lint:
-    uses: reqstool/.github/.github/workflows/typescript/lint.yml@main
+    uses: reqstool/.github/.github/workflows/typescript-lint.yml@main
 
   build:
     needs: lint
-    uses: reqstool/.github/.github/workflows/typescript/build.yml@main
+    uses: reqstool/.github/.github/workflows/typescript-build.yml@main
     with:
       use-xvfb: true
       dependency-version: ${{ inputs.reqstool_version || 'latest' }}
diff --git a/.github/workflows/check-semantic-pr.yml b/.github/workflows/check-semantic-pr.yml
index 5bacd57..81a00ea 100644
--- a/.github/workflows/check-semantic-pr.yml
+++ b/.github/workflows/check-semantic-pr.yml
@@ -5,6 +5,9 @@ on:
   pull_request_target:
     types: [opened, edited, synchronize, reopened]
 
+permissions:
+  pull-requests: read
+
 jobs:
   check:
-    uses: reqstool/.github/.github/workflows/check-semantic-pr.yml@main
+    uses: reqstool/.github/.github/workflows/common-check-semantic-pr.yml@main
diff --git a/.github/workflows/publish_vscode_ext.yml b/.github/workflows/publish_vscode_ext.yml
index 00c6c8b..e601242 100644
--- a/.github/workflows/publish_vscode_ext.yml
+++ b/.github/workflows/publish_vscode_ext.yml
@@ -17,7 +17,7 @@ on:
 jobs:
   check-release:
     if: github.event_name == 'release'
-    uses: reqstool/.github/.github/workflows/common/check-release.yml@main
+    uses: reqstool/.github/.github/workflows/common-check-release.yml@main
     with:
       version-format: semver
 
@@ -29,7 +29,7 @@ jobs:
   dry-run:
     if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     needs: [build]
-    uses: reqstool/.github/.github/workflows/typescript/publish-to-vscode.yml@main
+    uses: reqstool/.github/.github/workflows/typescript-publish-to-vscode.yml@main
     with:
       dry-run: true
       dependency-name: reqstoolVersion
@@ -41,7 +41,7 @@ jobs:
   publish:
     if: github.event_name == 'release'
     needs: [check-release, build]
-    uses: reqstool/.github/.github/workflows/typescript/publish-to-vscode.yml@main
+    uses: reqstool/.github/.github/workflows/typescript-publish-to-vscode.yml@main
     with:
       dry-run: false
       dependency-name: reqstoolVersion
diff --git a/.github/workflows/release-preview.yml b/.github/workflows/release-preview.yml
index cec7689..0796d80 100644
--- a/.github/workflows/release-preview.yml
+++ b/.github/workflows/release-preview.yml
@@ -5,7 +5,7 @@ on:
 
 jobs:
   preview:
-    uses: reqstool/.github/.github/workflows/common/release-preview.yml@main
+    uses: reqstool/.github/.github/workflows/common-release-preview.yml@main
     with:
       version-command: 'node -p "require(''./package.json'').version"'
     permissions:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 15a7150..f54f8bb 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ on:
 
 jobs:
   release:
-    uses: reqstool/.github/.github/workflows/common/release.yml@main
+    uses: reqstool/.github/.github/workflows/common-release.yml@main
     with:
       version: ${{ inputs.version }}
       version-format: semver