From a9e5e27aab819fd4133146e7aa0c16876ecac6b4 Mon Sep 17 00:00:00 2001
From: Jo <jo@thevoid.cafe>
Date: Fri, 20 Jun 2025 00:53:02 +0200
Subject: [PATCH 1/2] =?UTF-8?q?=F0=9F=91=B7=20Simplify=20deadnix=20workflo?=
 =?UTF-8?q?w?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/deadnix.yml | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/deadnix.yml b/.github/workflows/deadnix.yml
index 23f0b46..e7a32dd 100644
--- a/.github/workflows/deadnix.yml
+++ b/.github/workflows/deadnix.yml
@@ -1,6 +1,7 @@
 name: "Nix: check for unused code"
 
 on:
+  workflow_dispatch:
   pull_request:
   push:
     paths:
@@ -12,17 +13,9 @@ jobs:
     name: Run deadnix
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.ref_name }}
-          persist-credentials: false
-
+      - uses: actions/checkout@main
+      
       - name: Install lix
         uses: ./.github/actions/install-lix
 
-      - uses: cachix/cachix-action@v14
-        with:
-          name: deadnix
-
       - uses: phucleeuwu/deadnix-action@v1

From d65c18cf323877499f8b4bcf33333ebb28e232bd Mon Sep 17 00:00:00 2001
From: Jo <jo@thevoid.cafe>
Date: Fri, 20 Jun 2025 00:56:13 +0200
Subject: [PATCH 2/2] =?UTF-8?q?=F0=9F=91=B7=20Simplify=20checkout=20step?=
 =?UTF-8?q?=20in=20trufflehog=20workflow?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/check-leaks.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/check-leaks.yml b/.github/workflows/check-leaks.yml
index 72bbc91..08d6f1f 100644
--- a/.github/workflows/check-leaks.yml
+++ b/.github/workflows/check-leaks.yml
@@ -1,6 +1,7 @@
 name: "Trufflehog: check for exposed secrets"
 
 on:
+  workflow_dispatch:
   pull_request:
   push:
     paths:
@@ -18,10 +19,8 @@ jobs:
     name: Run trufflehog
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - uses: actions/checkout@main
         with:
-          ref: ${{ github.ref_name }}
           fetch-depth: 0
 
       - id: trufflehog