diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a0f1805690..84c7ea0ee4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,3 @@
----
 version: 2
 updates:
   - package-ecosystem: "github-actions"
diff --git a/.github/workflows/action-prettier.yml b/.github/workflows/action-prettier.yml
index 45ee27b8c1..a7e0a7172b 100644
--- a/.github/workflows/action-prettier.yml
+++ b/.github/workflows/action-prettier.yml
@@ -1,5 +1,7 @@
 name: Prettier
+
 on:
+  workflow_dispatch:
   push:
     branches:
       - "*"
@@ -18,6 +20,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Install Prettier and plugins
         run: |
diff --git a/.github/workflows/action-super-linter.yml b/.github/workflows/action-super-linter.yml
index c85f22b732..a2b12fca45 100644
--- a/.github/workflows/action-super-linter.yml
+++ b/.github/workflows/action-super-linter.yml
@@ -1,4 +1,3 @@
----
 name: Super Linter
 
 on:
@@ -31,6 +30,7 @@ jobs:
           # super-linter needs the full git history to get the
           # list of files that changed across commits
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Install Prettier plugins (for summary formatting)
         run: |
@@ -41,9 +41,11 @@ jobs:
         env:
           # To report GitHub Actions status checks
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VALIDATE_GITHUB_ACTIONS_ZIZMOR: false
           VALIDATE_JSCPD: false
-          VALIDATE_SHELL_SHFMT: false
-          VALIDATE_YAML_PRETTIER: false
           VALIDATE_JSON_PRETTIER: false
           VALIDATE_MARKDOWN_PRETTIER: false
           VALIDATE_NATURAL_LANGUAGE: false
+          VALIDATE_SHELL_SHFMT: false
+          VALIDATE_TERRAFORM_TERRASCAN: false
+          VALIDATE_YAML_PRETTIER: false
diff --git a/.github/workflows/action-update-copyright-years-in-license-file.yml b/.github/workflows/action-update-copyright-years-in-license-file.yml
index bb6126a971..7ee528ca99 100644
--- a/.github/workflows/action-update-copyright-years-in-license-file.yml
+++ b/.github/workflows/action-update-copyright-years-in-license-file.yml
@@ -1,4 +1,5 @@
 name: Update copyright year(s) in license file
+
 on:
   workflow_dispatch:
   schedule:
@@ -15,6 +16,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Action Update License Year
         uses: FantasticFiasco/action-update-license-year@v3
         with: