diff --git a/.github/labeler.yml b/.github/labeler.yml
index a199e47..ca7feb8 100644
--- a/.github/labeler.yml
+++ b/.github/labeler.yml
@@ -1,15 +1,16 @@
 documentation:
   - changed-files:
-      - any-glob-to-any-file: '**/*.md'
+    - any-glob-to-any-file: '**/*.md'
 
 ci:
   - changed-files:
-      - any-glob-to-any-file: '.github/*'
+    - any-glob-to-any-file: .github/**
+
 
 config:
   - changed-files:
-      - any-glob-to-any-file:
-          - '*.properties'
+    - any-glob-to-any-file:
+      - '*.properties'
 
 enhancement:
   - head-branch: [ '^feature', 'feature' ]
diff --git a/.github/workflows/commit-lint.yml b/.github/workflows/commit-lint.yml
new file mode 100644
index 0000000..84aeeea
--- /dev/null
+++ b/.github/workflows/commit-lint.yml
@@ -0,0 +1,23 @@
+name: Commit Lint
+
+on:
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  commit-lint:
+    name: GitWit Lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Run GitWit Lint
+        uses: rafandoo/gitwit-action@v1.1.0
+        with:
+          command: lint
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 5d5c3a5..e141727 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -13,6 +13,8 @@ jobs:
   changes:
     name: Analyze Changes
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     outputs:
       backend: ${{ steps.filter.outputs.backend }}
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index e100245..eff4214 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -126,6 +126,8 @@ jobs:
   build-docs:
     name: Build Documentation Site
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Checkout Source Code
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 014c9b6..11005ea 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -23,6 +23,6 @@ jobs:
           sync-labels: true
           configuration-path: .github/labeler.yml
           dot: true
-
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+