- Setting permissions on all workflows - Adding actionlint workflow to lint actions - Pin actions versions - Add codeowners