diff --git a/.github/workflows/integration-e2e.yml b/.github/workflows/integration-e2e.yml
index 08805e9..a10872e 100644
--- a/.github/workflows/integration-e2e.yml
+++ b/.github/workflows/integration-e2e.yml
@@ -1,10 +1,16 @@
 name: integration-e2e
-
 on:
   push:
     branches:
     - '**'
 
+permissions:
+  contents: read
+
+defaults:
+  run:
+    shell: bash
+
 jobs:
   test:
     runs-on: ubuntu-22.04
diff --git a/contrib/images/Makefile b/contrib/images/Makefile
index 96688fc..218b03e 100644
--- a/contrib/images/Makefile
+++ b/contrib/images/Makefile
@@ -18,6 +18,6 @@ start-bcd-consumer-integration: stop-bcd-consumer-integration
 
 stop-bcd-consumer-integration:
 	docker compose -f ibcsim-bcd/docker-compose.yml down
-	sudo rm -rf ibcsim-bcd/.testnets
+	rm -rf ibcsim-bcd/.testnets
 
 .PHONY: ibcsim-bcd ibcsim-bcd-rmi start-bcd-consumer-integration stop-bcd-consumer-integration babylond babylond-rmi
diff --git a/contrib/images/ibcsim-bcd/pre-deployment.sh b/contrib/images/ibcsim-bcd/pre-deployment.sh
index 2e6c11d..89a0750 100755
--- a/contrib/images/ibcsim-bcd/pre-deployment.sh
+++ b/contrib/images/ibcsim-bcd/pre-deployment.sh
@@ -1,7 +1,7 @@
 #!/bin/sh
 
 # Create new directory that will hold node and services' configuration
-mkdir -p ibcsim-bcd/.testnets && sudo chmod -R 777 ibcsim-bcd/.testnets
+mkdir -p ibcsim-bcd/.testnets && chmod -R 777 ibcsim-bcd/.testnets
 echo "Creating and configuring testnet directory..."
 docker run --rm -v $(pwd)/ibcsim-bcd/.testnets:/data babylonlabs-io/babylond \
     babylond testnet init-files --v 2 -o /data \
@@ -18,5 +18,5 @@ docker run --rm -v $(pwd)/ibcsim-bcd/.testnets:/data babylonlabs-io/babylond \
     --covenant-pks "bb50e2d89a4ed70663d080659fe0ad4b9bc3e06c17a227433966cb59ceee020d" # should be updated if `covenant-keyring` dir is changed`
 
 # Create separate subpaths for each component and copy relevant configuration
-sudo chmod -R 777 ibcsim-bcd/.testnets
+chmod -R 777 ibcsim-bcd/.testnets
 echo "Testnet directory created and configured successfully."
diff --git a/contrib/images/ibcsim-bcd/setup-bcd.sh b/contrib/images/ibcsim-bcd/setup-bcd.sh
index 3fe07f9..63bb181 100755
--- a/contrib/images/ibcsim-bcd/setup-bcd.sh
+++ b/contrib/images/ibcsim-bcd/setup-bcd.sh
@@ -103,9 +103,6 @@ sed -i 's/"babylon_contract_address": ""/"babylon_contract_address": "'"$babylon
 sed -i 's/"btc_staking_contract_address": ""/"btc_staking_contract_address": "'"$btcStakingContractAddr"'"/g' $CHAINDIR/$CHAINID/config/genesis.json
 sed -i 's/"btc_finality_contract_address": ""/"btc_finality_contract_address": "'"$btcFinalityContractAddr"'"/g' $CHAINDIR/$CHAINID/config/genesis.json
 
-# change permission so that e2e program can use the keys there
-sudo chmod -R 777 $CHAINDIR/$CHAINID
-
 # Start
 echo "Starting $BINARY..."
 $BINARY --home $CHAINDIR/$CHAINID start --pruning=nothing --grpc-web.enable=false --grpc.address="0.0.0.0:$GRPCPORT" --log_level trace --trace --log_format 'plain' 2>&1 | tee $CHAINDIR/$CHAINID.log &