diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 2cfb367..56853b4 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -14,8 +14,7 @@ jobs:
     - name: Set environment variables
       run: |
         echo "REPORTER=${{ github.event_name == 'pull_request' && 'github-pr-review' || 'github-check' }}" >> $GITHUB_ENV
-        echo "REVIEWDOG_GITHUB_API_TOKEN=${{ secrets.REVIEWDOG_GITHUB_API_TOKEN }}" >> $GITHUB_ENV
-        echo "REVIEWDOG_TOKEN=${{ secrets.REVIEWDOG_TOKEN }}" >> $GITHUB_ENV
+        echo "REVIEWDOG_GITHUB_API_TOKEN=${{ secrets.GITHUB_TOKEN }}" >> $GITHUB_ENV
 
     - name: clang-format
       uses: DoozyX/clang-format-lint-action@v0.14
@@ -34,14 +33,14 @@ jobs:
     - name: flake8
       uses: reviewdog/action-flake8@v3
       with:
-        github_token: ${{ secrets.REVIEWDOG_GITHUB_API_TOKEN }}
+        github_token: ${{ secrets.GITHUB_TOKEN }}
         reporter: ${{ env.REPORTER }}
         filter_mode: nofilter
 
     - name: black
       uses: reviewdog/action-black@v3
       with:
-        github_token: ${{ secrets.REVIEWDOG_GITHUB_API_TOKEN }}
+        github_token: ${{ secrets.GITHUB_TOKEN }}
         reporter: ${{ env.REPORTER }}
         filter_mode: nofilter
 
diff --git a/.github/workflows/macos-install.sh b/.github/workflows/macos-install.sh
index 6ceab1e..f0ce491 100755
--- a/.github/workflows/macos-install.sh
+++ b/.github/workflows/macos-install.sh
@@ -2,7 +2,12 @@
 
 set -e
 
-brew reinstall cmake
+# See https://github.com/actions/runner-images/issues/9471 for why we have
+# brew unlink and brew link commands here
+brew unlink cmake || true
+brew reinstall cmake || true
+brew link --overwrite cmake
+
 brew install dav1d aom rav1e
 
 if [ "$GHA_PYTHON_VERSION" == "2.7" ]; then