diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml
index 51e32d673..d28b1b8ba 100644
--- a/.github/workflows/audit.yml
+++ b/.github/workflows/audit.yml
@@ -19,8 +19,10 @@ name: Security audit
 
 on:
   push:
-    branches-ignore:
-      - 'gh-readonly-queue/**'
+    # Feature branches get CI from pull_request, so push runs only the long-lived branches.
+    branches:
+      - main
+      - 'branch-*'
     paths:
       - '**/Cargo.toml'
       - '**/Cargo.lock'
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index 3c387576b..e3531be94 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -19,11 +19,10 @@ name: Rust
 
 on:
   push:
-    # When PR is in the Merge Queue, GitHub will create a temporary branch - but we already have a
-    # CI running because of `merge_group`
-    # See also: https://github.com/orgs/community/discussions/15254
-    branches-ignore:
-      - 'gh-readonly-queue/**'
+    # Feature branches get CI from pull_request, so push runs only the long-lived branches.
+    branches:
+      - main
+      - 'branch-*'
   pull_request:
   merge_group: