diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
new file mode 100644
index 0000000..5fbd000
--- /dev/null
+++ b/.forgejo/workflows/ci.yml
@@ -0,0 +1,9 @@
+on:
+  push:
+
+jobs:
+  sast:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: pipx run yamllint .
diff --git a/.yamllint.yml b/.yamllint.yml
new file mode 100644
index 0000000..a5f2c7b
--- /dev/null
+++ b/.yamllint.yml
@@ -0,0 +1,8 @@
+---
+
+extends: default
+
+rules:
+  line-length:
+    max: 120
+    level: warning
diff --git a/files/gh-dash.yml b/files/gh-dash.yml
index a3c3457..e6ff374 100644
--- a/files/gh-dash.yml
+++ b/files/gh-dash.yml
@@ -1,17 +1,18 @@
+---
 prSections:
-- title: WIP
-  filters: is:open author:@me -org:tophatmonocle
-- title: Needs My Review
-  filters: is:open review-requested:@me -org:tophatmonocle
-- title: Involved
-  filters: is:open involves:@me -author:@me -org:tophatmonocle
+  - title: WIP
+    filters: is:open author:@me -org:tophatmonocle
+  - title: Needs My Review
+    filters: is:open review-requested:@me -org:tophatmonocle
+  - title: Involved
+    filters: is:open involves:@me -author:@me -org:tophatmonocle
 issuesSections:
-- title: My Issues
-  filters: is:open author:@me
-- title: Assigned
-  filters: is:open assignee:@me
-- title: Involved
-  filters: is:open involves:@me -author:@me
+  - title: My Issues
+    filters: is:open author:@me
+  - title: Assigned
+    filters: is:open assignee:@me
+  - title: Involved
+    filters: is:open involves:@me -author:@me
 defaults:
   preview:
     open: true
diff --git a/playbook.yml b/playbook.yml
index db4489a..90b6a4a 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -4,10 +4,10 @@
 
   tasks:
     - name: Ensure system up-to-date
-      become: yes
+      become: true
       apt:
-        update-cache: yes
-        upgrade: yes
+        update_cache: true
+        upgrade: "yes"
     - name: Install terminal & shell
       apt:
         pkg: