diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
new file mode 100644
index 00000000000..2efbe5565f1
--- /dev/null
+++ b/.github/actionlint.yaml
@@ -0,0 +1,7 @@
+self-hosted-runner:
+  # Labels of self-hosted runner in array of string
+  labels:
+    - bastion
+    - x86_64
+    - arm64
+    - aarch64
diff --git a/.github/workflows/build-deb-packages.yml b/.github/workflows/build-deb-packages.yml
index 269a634ee37..0e4334a4c21 100644
--- a/.github/workflows/build-deb-packages.yml
+++ b/.github/workflows/build-deb-packages.yml
@@ -43,10 +43,6 @@ jobs:
           apt update
           apt install -y python3 python3-venv python3-pip build-essential devscripts debhelper bash-completion git
 
-      - name: List CWD
-        run: |
-          ls -la $(cwd)
-
       - name: Download Release Changes
         uses: actions/download-artifact@v3
         with:
diff --git a/.github/workflows/build-rpm-packages.yml b/.github/workflows/build-rpm-packages.yml
index ccfc721f678..349a3a1c5d8 100644
--- a/.github/workflows/build-rpm-packages.yml
+++ b/.github/workflows/build-rpm-packages.yml
@@ -61,7 +61,7 @@ jobs:
           SALT_ONEDIR_ARCHIVE: "${{ github.workspace }}/artifacts/salt-${{ inputs.salt-version }}-onedir-linux-${{ matrix.arch }}.tar.xz"
         run: |
           echo "${{ inputs.salt-version }}" > salt/_version.txt
-          rpmbuild -bb --define="_salt_src $(pwd)" $(pwd)/pkg/rpm/salt.spec
+          rpmbuild -bb --define="_salt_src $(pwd)" "$(pwd)/pkg/rpm/salt.spec"
 
       - name: Upload RPMs
         uses: actions/upload-artifact@v3
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 1af09510b3c..326307b3e19 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -3,6 +3,11 @@ default_language_version:
 
 exclude: ^(doc/_static/.*|doc/_themes/.*)$
 repos:
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.6.23
+    hooks:
+      - id: actionlint
+
   - repo: https://github.com/saltstack/pip-tools-compile-impersonate
     rev: "4.6"
     hooks: