diff --git a/.github/workflows/build_changelog.yml b/.github/workflows/build_changelog.yml
index f0501083048..3cd6fffe855 100644
--- a/.github/workflows/build_changelog.yml
+++ b/.github/workflows/build_changelog.yml
@@ -6,5 +6,4 @@ on:
 
 jobs:
   changelog:
-    needs: release
     uses: ./.github/workflows/reusable_publish_changelog.yml
diff --git a/.github/workflows/on_opened_pr.yml b/.github/workflows/on_opened_pr.yml
index 2663d605325..6c5979c8b80 100644
--- a/.github/workflows/on_opened_pr.yml
+++ b/.github/workflows/on_opened_pr.yml
@@ -20,8 +20,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - name: "Debug workflow_run event"
-        run: echo "${{ github }}"
       - name: "Ensure related issue is present"
         uses: actions/github-script@v6
         env:
diff --git a/.github/workflows/python_build.yml b/.github/workflows/python_build.yml
index 901c593ebce..e7a9b1273a5 100644
--- a/.github/workflows/python_build.yml
+++ b/.github/workflows/python_build.yml
@@ -28,7 +28,6 @@ jobs:
       matrix:
         python-version: [3.7, 3.8, 3.9]
     env:
-      OS: ${{ matrix.os }}
       PYTHON: ${{ matrix.python-version }}
     steps:
       - uses: actions/checkout@v3
@@ -56,6 +55,6 @@ jobs:
         with:
           file: ./coverage.xml
           # flags: unittests
-          env_vars: OS,PYTHON
+          env_vars: PYTHON
           name: aws-lambda-powertools-python-codecov
           # fail_ci_if_error: true  # failing more consistently making CI unreliable despite all tests above passing
diff --git a/.github/workflows/reusable_deploy_layer_stack.yml b/.github/workflows/reusable_deploy_layer_stack.yml
index e1190e19873..20d69b9c814 100644
--- a/.github/workflows/reusable_deploy_layer_stack.yml
+++ b/.github/workflows/reusable_deploy_layer_stack.yml
@@ -8,12 +8,15 @@ on:
   workflow_call:
     inputs:
       stage:
+        description: "Deployment stage (BETA, PROD)"
         required: true
         type: string
       artefact-name:
+        description: "CDK Layer Artefact name to download"
         required: true
         type: string
       environment:
+        description: "GitHub Environment to use for encrypted secrets"
         required: true
         type: string
 
diff --git a/.github/workflows/reusable_export_pr_details.yml b/.github/workflows/reusable_export_pr_details.yml
index 86c3e7d645e..ec168b95f20 100644
--- a/.github/workflows/reusable_export_pr_details.yml
+++ b/.github/workflows/reusable_export_pr_details.yml
@@ -4,13 +4,16 @@ on:
   workflow_call:
     inputs:
       record_pr_workflow_id:
+        description: "Record PR workflow execution ID to download PR details"
         required: true
         type: number
       workflow_origin: # see https://github.com/awslabs/aws-lambda-powertools-python/issues/1349
+        description: "Repository full name for runner integrity"
         required: true
         type: string
     secrets:
       token:
+        description: "GitHub Actions temporary and scoped token"
         required: true
     # Map the workflow outputs to job outputs
     outputs:
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 6a41e0d945c..71b1125cf54 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -39,3 +39,8 @@ repos:
     hooks:
       - id: cfn-python-lint
         files: examples/.*\.(yaml|yml)$
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.6.16
+    hooks:
+      - id: actionlint-docker
+        args: [-pyflakes=]