diff --git a/.github/workflows/announce-a-release.yml b/.github/workflows/announce-a-release.yml
index fb99e09..554f347 100644
--- a/.github/workflows/announce-a-release.yml
+++ b/.github/workflows/announce-a-release.yml
@@ -2,7 +2,8 @@ name: Announce a release
 
 on:
   push:
-    tags: announce-\d+.\d+.\d+
+    tags:
+      - 'announce-[0-9]+.[0-9]+.[0-9]+'
 
 concurrency: announce-a-release
 
diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml
index 7cbcbe6..3271165 100644
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -7,6 +7,17 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
+  actionlint:
+    name: Lint GitHub Action Workflows
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Check workflow files
+        uses: docker://ponylang/shared-docker-ci-actionlint:20230810
+        with:
+          args: -color
+
   superlinter:
     name: Lint bash, docker, markdown, and yaml
     runs-on: ubuntu-latest
diff --git a/.github/workflows/prepare-for-a-release.yml b/.github/workflows/prepare-for-a-release.yml
index 4e8c89c..11f3113 100644
--- a/.github/workflows/prepare-for-a-release.yml
+++ b/.github/workflows/prepare-for-a-release.yml
@@ -2,7 +2,8 @@ name: Prepare for a release
 
 on:
   push:
-    tags: release-\d+.\d+.\d+
+    tags:
+      - 'release-[0-9]+.[0-9]+.[0-9]+'
 
 concurrency: prepare-for-a-release
 
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
index 0cae850..3e83160 100644
--- a/.github/workflows/release-notes.yml
+++ b/.github/workflows/release-notes.yml
@@ -8,7 +8,7 @@ on:
       - '**'
     paths-ignore:
       - .release-notes/next-release.md
-      - .release-notes/\d+.\d+.\d+.md
+      - .release-notes/[0-9]+.[0-9]+.[0-9]+.md
 
 jobs:
   release-notes:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1d860e9..7ba02b9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     tags:
-      - \d+.\d+.\d+
+      - '[0-9]+.[0-9]+.[0-9]+'
 
 concurrency: release
 
@@ -33,7 +33,7 @@ jobs:
     steps:
       - uses: actions/checkout@v2
       - name: Docker login
-        run: "docker login -u $DOCKER_USERNAME -p $DOCKER_PASSWORD"
+        run: docker login -u "$DOCKER_USERNAME" -p "$DOCKER_PASSWORD"
         env:
           DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
           DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}