diff --git a/.github/workflows/ci-release.yml b/.github/workflows/ci-release.yml
index c7742d5..6045e64 100644
--- a/.github/workflows/ci-release.yml
+++ b/.github/workflows/ci-release.yml
@@ -57,7 +57,7 @@ jobs:
           echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
 
       - name: Checkout hmy code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           path: go-sdk
           ref: refs/tags/${{ steps.resolve-tag.outputs.tag }}
@@ -97,7 +97,7 @@ jobs:
 
     steps:
       - name: Checkout hmy code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           path: go-sdk
           ref: refs/tags/${{ needs.check.outputs.tag }}
@@ -105,7 +105,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up Go
-        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 #v6.5.0
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e #v7.0.0
         with:
           go-version-file: go-sdk/go.mod
           cache: false
@@ -159,7 +159,7 @@ jobs:
 
     steps:
       - name: Checkout hmy code
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
         with:
           path: go-sdk
           ref: refs/tags/${{ needs.check.outputs.tag }}
diff --git a/.github/workflows/github-actions-lint.yaml b/.github/workflows/github-actions-lint.yaml
new file mode 100644
index 0000000..2c0a5b3
--- /dev/null
+++ b/.github/workflows/github-actions-lint.yaml
@@ -0,0 +1,44 @@
+name: GitHub Actions Security Analysis with zizmor 🌈 and actionlint 
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+    paths:
+      - '.github/workflows/**/*.yml'
+      - '.github/workflows/**/*.yaml'
+
+  pull_request:
+    branches: ["**"]
+    paths:
+      - '.github/workflows/**/*.yml'
+      - '.github/workflows/**/*.yaml'
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: Run zizmor 🌈
+    runs-on: ubuntu-latest
+    steps:
+      - &checkout-repository
+        name: Checkout repository
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1
+        with:
+          persist-credentials: false
+          fetch-depth: 1
+
+      - name: Run zizmor 🌈
+        uses: zizmorcore/zizmor-action@70fb788f84895a7701f5643d103d587e460b5c99 # v0.6.3
+        with:
+          inputs: ./.github/
+          advanced-security: false
+
+  actionlint:
+    name: Run actionlint
+    runs-on: ubuntu-latest
+    steps:
+      - *checkout-repository
+      - name: Run actionlint # Docu: https://github.com/rhysd/actionlint/blob/main/docs/usage.md#docker
+        uses: docker://rhysd/actionlint@sha256:9d36088643581e728c969f35141f88139fec77280b2be23c1f66f8e40e1025e7 #v1.7.12
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
deleted file mode 100644
index de02f06..0000000
--- a/.github/workflows/zizmor.yml
+++ /dev/null
@@ -1,34 +0,0 @@
-name: GitHub Actions Security Analysis with zizmor 🌈
-
-on:
-  push:
-    branches:
-      - master
-    paths:
-      - '.github/workflows/**/*.yml'
-      - '.github/workflows/**/*.yaml'
-
-  pull_request:
-    branches: ["**"]
-    paths:
-      - '.github/workflows/**/*.yml'
-      - '.github/workflows/**/*.yaml'
-
-permissions: {}
-
-jobs:
-  zizmor:
-    name: Run zizmor 🌈
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0
-        with:
-          persist-credentials: false
-          fetch-depth: 1
-
-      - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
-        with:
-          inputs: ./.github/
-          advanced-security: false