diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a049ca3..d6b32eb 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -5,14 +5,18 @@ on:
     branches:
       - master
       - 'stage/**' # branch pattern for general changes
+  pull_request:
+    branches:
+      - master
   # Enable running this workflow manually from the Actions tab
   workflow_dispatch:
 
-# Sets permissions of the GITHUB_TOKEN to allow deployment to GitHub Pages
+# GITHUB_TOKEN permissions needed for deployment (copied from pages.yaml)
 permissions:
   contents: read
-  pages: write
-  id-token: write
+  deployments: none
+  pull-requests: write
+  statuses: write
 
 jobs:
   index:
diff --git a/.github/workflows/index.yaml b/.github/workflows/index.yaml
index 224b843..d0d0f2a 100644
--- a/.github/workflows/index.yaml
+++ b/.github/workflows/index.yaml
@@ -22,7 +22,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v3
       - name: Query Repositories
-        run: ./query.py -o index.json -v -Q ${{startsWith('stage/', github.ref) && 75 || 1000}}
+        run: ./query.py -o index.json -v -Q ${{github.ref_name == 'master' && 1000 || 75}}
         env:
           GH_TOKEN: ${{ github.token }}
       - name: Upload Index
diff --git a/.github/workflows/pages.yaml b/.github/workflows/pages.yaml
index 2e47417..f4e1f89 100644
--- a/.github/workflows/pages.yaml
+++ b/.github/workflows/pages.yaml
@@ -8,7 +8,7 @@ on:
   workflow_call:
     inputs:
       ci:
-        description: 'Used to dinstinguish a CI workflow call from a standalone workflow'
+        description: 'Used to distinguish a CI workflow call from a standalone workflow'
         type: boolean
         required: false
         default: true
diff --git a/.github/workflows/testbed.yaml b/.github/workflows/testbed.yaml
index d2772ec..bf07047 100644
--- a/.github/workflows/testbed.yaml
+++ b/.github/workflows/testbed.yaml
@@ -8,7 +8,7 @@ on:
   workflow_call:
     inputs:
       ci:
-        description: 'Used to dinstinguish a CI workflow call from a standalone workflow'
+        description: 'Used to distinguish a CI workflow call from a standalone workflow'
         type: boolean
         required: false
         default: true