diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index f760c1fa..37120a42 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -92,6 +92,8 @@ jobs:
       uses: ffurrer2/extract-release-notes@v1
     - name: Release
       uses: softprops/action-gh-release@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
         body: ${{ steps.release_notes.outputs.release_notes }}
         prerelease: ${{ contains(github.ref, '-') }}
@@ -100,19 +102,6 @@ jobs:
           ./release/*.zip
           ./release/*.msi
 
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
-    # - name: Bump personal tap formula
-    #   uses: mislav/bump-homebrew-formula-action@v1
-    #   if: "matrix.os == 'macos-latest' && !contains(github.ref, '-')" # skip prereleases
-    #   env:
-    #     COMMITTER_TOKEN: ${{ secrets.BREW_TOKEN }}
-    #   with:
-    #     formula-name: gitui
-    #     homebrew-tap: extrawurst/tap
-    #     download-url: https://github.com/extrawurst/gitui/releases/download/${{ steps.get_version.outputs.version }}/gitui-mac.tar.gz
-
     - name: Bump homebrew-core formula
       uses: mislav/bump-homebrew-formula-action@v2
       if: "matrix.os == 'macos-latest' && !contains(github.ref, '-')" # skip prereleases
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bdb0f5c2..b7f8518c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -233,13 +233,12 @@ jobs:
         cargo install --git https://github.com/est31/cargo-udeps --locked
         cargo +nightly udeps --all-targets
 
-
   sec:
     name: Security audit
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: rustsec/audit-check@v1.4.1
+    - uses: rustsec/audit-check@v1
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
 
@@ -253,7 +252,7 @@ jobs:
       uses: ffurrer2/extract-release-notes@v1
       with:
         release_notes_file: ./release-notes.txt
-    - uses: actions/upload-artifact@v1
+    - uses: actions/upload-artifact@v3
       with:
         name: release-notes.txt
         path: ./release-notes.txt