diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4cc7c875..e878eaa9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,14 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
+# Cancel in-progress runs for pull requests, but not for master branch pushes
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
 jobs:
   test:
     name: "JDK ${{ matrix.java }}"
@@ -16,11 +24,6 @@ jobs:
         java: [ 8, 11, 17, 21 ]
     runs-on: ubuntu-latest
     steps:
-      # Cancel any previous runs for the same branch that are still running.
-      - name: 'Cancel previous runs'
-        uses: styfle/cancel-workflow-action@d07a454dad7609a92316b57b23c9ccfd4f59af66
-        with:
-          access_token: ${{ github.token }}
       - name: 'Check out repository'
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with: