diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c43985a3..bfe7a0e2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,10 +1,18 @@
 name: CI
 on:
-  push:
   pull_request:
-  workflow_dispatch:
+  push:
+    branches-ignore:
+    - dependabot/*
+    - renovate/*
   schedule:
-  - cron: '0 0 * * 0'
+  - cron: 0 0 * * 0
+  workflow_dispatch:
+concurrency:
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   ci:
     strategy:
@@ -23,7 +31,7 @@ jobs:
         os:
         - macos-latest
         - ubuntu-latest
-    runs-on: ${{ matrix.os }}
+    runs-on: "${{ matrix.os }}"
     timeout-minutes: 10
     env:
       BUNDLE_GEMFILE: test/gemfiles/Gemfile.${{ matrix.gemfile }}
@@ -32,7 +40,7 @@ jobs:
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
-        ruby-version: ${{ matrix.ruby }}
+        ruby-version: "${{ matrix.ruby }}"
         bundler-cache: true
     - name: Run tests
       run: bin/ci
@@ -43,7 +51,7 @@ jobs:
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
-        ruby-version: '3.1' # Run rubocop against lowest supported ruby
+        ruby-version: '3.3'
         bundler-cache: true
     - name: Run rubocop
       run: bundle exec rake rubocop
diff --git a/.github/workflows/update_certs.yml b/.github/workflows/update_certs.yml
index 8438d5dc..9e5a14d6 100644
--- a/.github/workflows/update_certs.yml
+++ b/.github/workflows/update_certs.yml
@@ -1,10 +1,13 @@
 name: Update k0s Certs
-
 on:
-  workflow_dispatch:
   schedule:
-  - cron: '0 0 1 * *'
-
+  - cron: 0 0 1 * *
+  workflow_dispatch:
+concurrency:
+  group: "${{ github.workflow }}-${{ github.ref }}"
+  cancel-in-progress: true
+permissions:
+  contents: read
 jobs:
   update-certs-k0s:
     runs-on: ubuntu-latest
@@ -13,7 +16,7 @@ jobs:
     - name: Set up Ruby
       uses: ruby/setup-ruby@v1
       with:
-        ruby-version: "3.3"
+        ruby-version: '3.3'
         bundler-cache: true
     - name: Check k0s Certs
       id: check-certs-expired
@@ -26,8 +29,7 @@ jobs:
       uses: peter-evans/create-pull-request@v7
       if: steps.check-certs-expired.outcome == 'failure'
       with:
-        add-paths: |
-          test/config/*
+        add-paths: test/config/*
         commit-message: Update k0s Certs
         branch: update_k0s_certs
         author: ManageIQ Bot <bot@manageiq.org>
@@ -38,4 +40,4 @@ jobs:
         push-to-fork: miq_bot/kubeclient
         title: Update k0s Certs
         body: Update the saved kubeclient certificates
-        token: ${{ secrets.PR_TOKEN }}
+        token: "${{ secrets.PR_TOKEN }}"
diff --git a/README.md b/README.md
index d2606237..16730ac8 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,6 @@
 
 [![Gem Version](https://badge.fury.io/rb/kubeclient.svg)](http://badge.fury.io/rb/kubeclient)
 [![Build Status](https://github.com/ManageIQ/kubeclient/actions/workflows/ci.yml/badge.svg)](https://github.com/ManageIQ/kubeclient/actions?branch=master)
-[![Code Climate](https://codeclimate.com/github/ManageIQ/kubeclient.svg)](https://codeclimate.com/github/ManageIQ/kubeclient)
 [![Downloads rate by version](https://img.shields.io/badge/downloads%20rate-by%20version-blue)](https://ui.honeycomb.io/ruby-together/datasets/rubygems.org/result/7mZHKUfmHkj)
 
 A Ruby client for Kubernetes REST api.