diff --git a/.github/workflows/megalinter.yaml b/.github/workflows/megalinter.yaml
new file mode 100644
index 0000000..2900244
--- /dev/null
+++ b/.github/workflows/megalinter.yaml
@@ -0,0 +1,13 @@
+---
+name: MegaLinter
+
+on:
+  pull_request:
+
+jobs:
+  megalinter:
+    name: MegaLinter
+    uses: bruzit/github-actions-and-workflows/.github/workflows/megalinter.yaml@v0
+    permissions:
+      contents: write
+      pull-requests: write
diff --git a/.gitignore b/.gitignore
index cdc99a4..005a9f4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 .env
 *.pem
+megalinter-reports/
diff --git a/.mega-linter.yml b/.mega-linter.yml
new file mode 100644
index 0000000..f3d68f8
--- /dev/null
+++ b/.mega-linter.yml
@@ -0,0 +1,5 @@
+---
+ENABLE:
+  - ACTION
+  - MARKDOWN
+  - YAML
diff --git a/.releaserc.yaml b/.releaserc.yaml
index 25a3bfc..95938e3 100644
--- a/.releaserc.yaml
+++ b/.releaserc.yaml
@@ -10,5 +10,5 @@ plugins:
     - changelogTitle: '# Changelog'
   - - "@semantic-release/git"
     - assets:
-      - CHANGELOG.md
+        - CHANGELOG.md
   - semantic-release-major-tag
diff --git a/zizmor.yaml b/zizmor.yaml
new file mode 100644
index 0000000..bbb0366
--- /dev/null
+++ b/zizmor.yaml
@@ -0,0 +1,6 @@
+---
+rules:
+  unpinned-uses:
+    config:
+      policies:
+        "*": ref-pin