diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 53f8242..aa30540 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -1,6 +1,13 @@
 version: 2
 updates:
-  - package-ecosystem: "cargo"
+  # Update Cargo deps
+  - package-ecosystem: cargo
     directory: "/"
     schedule:
       interval: "weekly"
+
+  # Update used workflows
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: daily
diff --git a/.github/workflows/nix-cache.yaml b/.github/workflows/nix-cache.yaml
index 472768f..d925be6 100644
--- a/.github/workflows/nix-cache.yaml
+++ b/.github/workflows/nix-cache.yaml
@@ -1,19 +1,28 @@
 name: "Populate cachix cache"
+
 on:
   workflow_dispatch:
   push:
-    branches: [ master ]
+    branches: [ "main" ]
     paths: [ 'src/**.rs', 'Cargo.toml', 'Cargo.lock', 'nix/package.nix' ]
+
+permissions:
+  contents: read
+
 jobs:
   populate-cache:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v25
-      with:
-        nix_path: nixpkgs=channel:nixos-unstable
-    - uses: cachix/cachix-action@v14
-      with:
-        name: nyx
-        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-    - run: nix build
+      - name: "CHeckout"
+        uses: actions/checkout@v4
+
+      - uses: cachix/install-nix-action@v25
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+
+      - uses: cachix/cachix-action@v14
+        with:
+          name: nyx
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+
+      - run: nix build
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 8f49c41..71f28e8 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -39,7 +39,7 @@ jobs:
 
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Install Rust
         uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
index ce827a1..360ef75 100644
--- a/.github/workflows/rust.yml
+++ b/.github/workflows/rust.yml
@@ -1,10 +1,13 @@
 name: Build with Cargo
 
+permissions:
+  contents: read
+
 on:
+  workflow_dispatch:
   push:
     branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
+    paths: [ "src/**.rs", "Cargo.toml", "Cargo.lock"]
 
 env:
   CARGO_TERM_COLOR: always
@@ -13,6 +16,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - name: Build
-      run: cargo build --verbose
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Build
+        run: cargo build --verbose