diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 98a6d809..0f548e69 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,12 +1,15 @@
-name: Build and test
-on: [ push ]
+---
+
+name: "Build and test"
+on:  # yamllint disable-line rule:truthy
+  - "push"
 
 jobs:
   nix-ci:
-    uses: rake5k/flake-commons/.github/workflows/nix-ci.yml@main
+    uses: "rake5k/flake-commons/.github/workflows/nix-ci.yml@main"
     with:
-      branch: ${{ github.ref_name }}
-      nix-command: flake check --impure
-      system: x86_64-linux
+      branch: "${{ github.ref_name }}"
+      nix-command: "flake check --impure"
+      system: "x86_64-linux"
     secrets:
-      CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
+      CACHIX_AUTH_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"
diff --git a/.github/workflows/update.yml b/.github/workflows/update.yml
index bf6fe2a9..3c94de3f 100644
--- a/.github/workflows/update.yml
+++ b/.github/workflows/update.yml
@@ -1,13 +1,15 @@
-name: Update inputs
-on:
+---
+
+name: "Update inputs"
+on:  # yamllint disable-line rule:truthy
   schedule:
-    - cron: 0 1 * * *
+    - cron: "0 1 * * *"
 
 jobs:
   nix-update:
-    uses: rake5k/flake-commons/.github/workflows/nix-update.yml@main
+    uses: "rake5k/flake-commons/.github/workflows/nix-update.yml@main"
     with:
-      base-branch: master
-      nix-check-command: flake check --impure
+      base-branch: "master"
+      nix-check-command: "flake check --impure"
     secrets:
-      CACHIX_AUTH_TOKEN: ${{ secrets.CACHIX_AUTH_TOKEN }}
+      CACHIX_AUTH_TOKEN: "${{ secrets.CACHIX_AUTH_TOKEN }}"