diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d343120d..c9346888 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -16,7 +16,7 @@ updates:
       - dependencies
       - go
       - "Changed"
-    reviewers: ["cmmarslender", "Starttoaster"]
+    reviewers: ["cameroncooper", "emlowe"]
     groups:
       global:
         patterns:
@@ -50,7 +50,7 @@ updates:
       - dependencies
       - github_actions
       - "Changed"
-    reviewers: ["cmmarslender", "Starttoaster", "pmaslana"]
+    reviewers: ["cameroncooper", "emlowe"]
 
   - package-ecosystem: "npm"
     directory: /
@@ -65,7 +65,7 @@ updates:
       - dependencies
       - javascript
       - "Changed"
-    reviewers: ["cmmarslender", "ChiaMineJP"]
+    reviewers: ["emlowe", "seeden"]
 
   - package-ecosystem: cargo
     directory: /
diff --git a/.github/workflows/check-commit-signing.yml b/.github/workflows/check-commit-signing.yml
index fa8e21e0..333ece39 100644
--- a/.github/workflows/check-commit-signing.yml
+++ b/.github/workflows/check-commit-signing.yml
@@ -10,6 +10,9 @@ on:
     branches:
       - "**"
 
+permissions:
+  contents: read
+
 concurrency:
   group: ${{ github.event_name == 'pull_request' && format('{0}-{1}', github.workflow_ref, github.event.pull_request.number) || github.run_id }}
   cancel-in-progress: true