diff --git a/.github/workflows/act.yml b/.github/workflows/act.yml
index 13113b9..c02ad2e 100644
--- a/.github/workflows/act.yml
+++ b/.github/workflows/act.yml
@@ -52,13 +52,6 @@ jobs:
           git add .
           git commit -m "Initial commit"
 
-      - name: Run the ci flow
-        id: flow_ci
-        shell: bash
-        working-directory: template
-        run: |
-          act -W .github/workflows/ci.yml -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-latest
-
       - name: Run the book flow
         id: flow_book
         shell: bash
@@ -72,3 +65,10 @@ jobs:
         working-directory: template
         run: |
           act -W .github/workflows/pre-commit.yml -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-latest
+
+      - name: Run the ci flow
+        id: flow_ci
+        shell: bash
+        working-directory: template
+        run: |
+          act -W .github/workflows/ci.yml -P ubuntu-latest=ghcr.io/catthehacker/ubuntu:act-latest
\ No newline at end of file
diff --git a/template/.github/workflows/book.yml.jinja b/template/.github/workflows/book.yml.jinja
index 27d4ddb..478b4ef 100644
--- a/template/.github/workflows/book.yml.jinja
+++ b/template/.github/workflows/book.yml.jinja
@@ -3,12 +3,13 @@ name: "book"
 on:
 - push
 
-permissions:
-  checks: write
-  contents: read
-
 jobs:
+
   marimo:
+    permissions:
+      checks: write
+      contents: read
+
     runs-on: "ubuntu-latest"
     steps:
       - name: Checkout [${% raw %}{{ github.repository }}{% endraw %}]
@@ -19,6 +20,10 @@ jobs:
           source_folder: book/marimo
 
   pdoc:
+    permissions:
+      checks: write
+      contents: read
+
     runs-on: "ubuntu-latest"
     steps:
       - name: Checkout [${% raw %}{{ github.repository }}{% endraw %}]
@@ -41,6 +46,10 @@ jobs:
           source-folder: src/{{ project_name }}
 
   jupyter:
+    permissions:
+      checks: write
+      contents: read
+
     runs-on: "ubuntu-latest"
     steps:
       - name: Checkout [${% raw %}{{ github.repository }}{% endraw %}]