diff --git a/.github/dependabot.yml b/.github/dependabot.yml
deleted file mode 100644
index 5251d0f..0000000
--- a/.github/dependabot.yml
+++ /dev/null
@@ -1,11 +0,0 @@
-# To get started with Dependabot version updates, you'll need to specify which
-# package ecosystems to update and where the package manifests are located.
-# Please see the documentation for all configuration options:
-# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
-
-version: 2
-updates:
-  - package-ecosystem: "cargo" # See documentation for possible values
-    directory: "/" # Location of package manifests
-    schedule:
-      interval: "weekly"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7058126..bd4e342 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,8 +14,27 @@ env:
 
 jobs:
   pre_ci:
+    needs: conventional
     uses: dtolnay/.github/.github/workflows/pre_ci.yml@master
 
+  conventional:
+    name: Conventional Commits
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: webiny/action-conventional-commits@v1.3.0
+
+  security_audit:
+    needs: pre_ci
+    if: needs.pre_ci.outputs.continue
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: taiki-e/install-action@cargo-deny
+      - name: Scan for vulnerabilities
+        run: cargo deny check advisories
+
   test:
     name: Rust ${{matrix.rust}}
     needs: pre_ci
@@ -55,6 +74,7 @@ jobs:
     name: Clippy
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request'
+    needs: conventional
     timeout-minutes: 45
     steps:
       - name: Checkout repository
@@ -107,6 +127,7 @@ jobs:
     name: Outdated
     runs-on: ubuntu-latest
     if: github.event_name != 'pull_request'
+    needs: conventional
     timeout-minutes: 45
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/conventional-commits.yml b/.github/workflows/conventional-commits.yml
deleted file mode 100644
index b65d315..0000000
--- a/.github/workflows/conventional-commits.yml
+++ /dev/null
@@ -1,20 +0,0 @@
-name: Conventional Commits
-
-on:
-  push:
-    branches: [ main ]
-  pull_request:
-    branches: [ main ]
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
-  cancel-in-progress: true
-
-jobs:
-  build:
-    name: Conventional Commits
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: webiny/action-conventional-commits@v1.3.0