diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e736b3a..a363604 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,8 +1,6 @@
 name: ci
 
 on:
-  push:
-    branches: [main]
   pull_request:
 
 permissions: read-all
@@ -62,7 +60,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-latest, macos-latest]
+        os: [ubuntu-latest]
     runs-on: ${{ matrix.os }}
     env:
       CGO_ENABLED: "1"
@@ -73,16 +71,11 @@ jobs:
         with:
           go-version-file: go.mod
 
-      - name: Assert C toolchain (macOS)
-        if: runner.os == 'macOS'
-        run: clang --version
-
       - name: Go build cache
         uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           path: |
             ~/.cache/go-build
-            ~/Library/Caches/go-build
             ~/go/pkg/mod
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 75ec537..53ceb33 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -4,8 +4,6 @@ name: fuzz (smoke)
 # for continuous fuzzing (OSS-Fuzz Tier 2) — just catches obvious
 # regressions before merge.
 on:
-  push:
-    branches: [main]
   pull_request:
 
 permissions: read-all