diff --git a/.github/workflows/configlet.yml b/.github/workflows/configlet.yml
index fca9d3e..47eb875 100644
--- a/.github/workflows/configlet.yml
+++ b/.github/workflows/configlet.yml
@@ -1,16 +1,15 @@
-name: Configlet CI
+name: Configlet
 
-on: [push, pull_request, workflow_dispatch]
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+permissions:
+  contents: read
 
 jobs:
   configlet:
-    runs-on: ubuntu-latest
-
-    steps:
-    - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
-
-    - name: Fetch configlet
-      uses: exercism/github-actions/configlet-ci@main
-        
-    - name: Configlet Linter
-      run: configlet lint
+    uses: exercism/github-actions/.github/workflows/configlet.yml@main
diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml
index c3e277e..e7b99e5 100644
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -2,20 +2,18 @@ name: Tools
 
 on:
   push:
-    branches: [main]
+    branches:
+      - main
     paths:
       - .github/labels.yml
       - .github/workflows/sync-labels.yml
-  schedule:
-    - cron: 0 0 1 * *
   workflow_dispatch:
+  schedule:
+    - cron: 0 0 1 * * # First day of each month
+
+permissions:
+  issues: write
 
 jobs:
   sync-labels:
-    name: Sync labels
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@a12a3943b4bdde767164f792f33f40b04645d846
-      - uses: micnncim/action-label-syncer@3abd5ab72fda571e69fffd97bd4e0033dd5f495c
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    uses: exercism/github-actions/.github/workflows/labels.yml@main