diff --git a/.github/workflows/tf-checks.yml b/.github/workflows/tf-checks.yml
index 6e1a98ce..3fbc0ca2 100644
--- a/.github/workflows/tf-checks.yml
+++ b/.github/workflows/tf-checks.yml
@@ -12,8 +12,8 @@ on:
       provider:
         required: false
         type: string
-        default: azurerm
-        description: 'Cloud provider to run the workflow. e.g. azurerm, aws, gcp, or digitalocean'
+        default: ""
+        description: 'Cloud provider to run the workflow. e.g. azurerm, aws, gcp, digitalocean, or none (skip cloud auth for validate-only)'
       aws_region:
         required: false
         type: string
@@ -46,7 +46,7 @@ on:
       show_plan:
         required: false
         type: boolean
-        default: true
+        default: false
         description: 'Show full terraform plan output. If false, only shows summary (e.g. Plan: 4 to add, 1 to change).'
       gcp_credentials:
         required: false