diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index eac75e21ef56a..e03393011a868 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -96,6 +96,7 @@ jobs:
       - if: github.ref == 'refs/heads/main' && !github.event.pull_request.head.repo.fork
         uses: gaurav-nelson/github-action-markdown-link-check@v1
         name: Check for dead links (main)
+        timeout-minutes: 1
         with:
           use-quiet-mode: yes
           use-verbose-mode: yes
@@ -104,6 +105,7 @@ jobs:
       - if: github.ref != 'refs/heads/main' || github.event.pull_request.head.repo.fork
         uses: gaurav-nelson/github-action-markdown-link-check@v1
         name: Check for dead links (pull request)
+        timeout-minutes: 1
         with:
           use-quiet-mode: yes
           use-verbose-mode: yes
diff --git a/.github/workflows/contrib.yaml b/.github/workflows/contrib.yaml
index c7fb94bde1666..c985f52bef794 100644
--- a/.github/workflows/contrib.yaml
+++ b/.github/workflows/contrib.yaml
@@ -59,7 +59,6 @@ jobs:
           requireScope: false
 
   release-labels:
-    name: Release labels
     runs-on: ubuntu-latest
     # Depend on lint so that title is Conventional Commits-compatible.
     needs: [title]
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index eecb7f882f8c6..913b9f8b7dbc3 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -27,34 +27,25 @@ concurrency:
 jobs:
   codeql:
     runs-on: ${{ github.repository_owner == 'coder' && 'ubuntu-latest-16-cores' || 'ubuntu-latest' }}
-    strategy:
-      fail-fast: false
-      matrix:
-        language: ["go", "javascript"]
-
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v3
+      - uses: actions/checkout@v3
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v2
         with:
-          languages: ${{ matrix.language }}
+          languages: go, javascript
 
       - name: Setup Go
-        if: matrix.language == 'go'
         uses: actions/setup-go@v3
         with:
           go-version: "~1.19"
 
       - name: Go Cache Paths
-        if: matrix.language == 'go'
         id: go-cache-paths
         run: |
           echo "GOMODCACHE=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
 
       - name: Go Mod Cache
-        if: matrix.language == 'go'
         uses: actions/cache@v3
         with:
           path: ${{ steps.go-cache-paths.outputs.GOMODCACHE }}
@@ -62,14 +53,11 @@ jobs:
 
       # Workaround to prevent CodeQL from building the dashboard.
       - name: Remove Makefile
-        if: matrix.language == 'go'
         run: |
           rm Makefile
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v2
-        with:
-          category: "/language:${{matrix.language}}"
 
   trivy:
     runs-on: ${{ github.repository_owner == 'coder' && 'ubuntu-latest-16-cores' || 'ubuntu-latest' }}