diff --git a/.forgejo/workflows/renovate.yaml b/.forgejo/workflows/renovate.yaml
index ccbd23d..d1b7355 100644
--- a/.forgejo/workflows/renovate.yaml
+++ b/.forgejo/workflows/renovate.yaml
@@ -23,13 +23,18 @@ jobs:
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
         with:
           show-progress: false
+      - name: setup .ssh directory
+        run: mkdir -p /home/ubuntu/.ssh && chmod 700 /home/ubuntu/.ssh
       - name: Write ssh key
         id: sshkey
-        uses: https://github.com/timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
+        # uses: https://github.com/timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
+        uses: timheuer/base64-to-file@adaa40c0c581f276132199d4cf60afa07ce60eac # v1
         with:
           encodedString: "${{ secrets.SSH_USER }}"
           fileName: id_ed25519
-          fileDir: ~/.ssh
+          fileDir: /home/ubuntu/.ssh
+      - name: chmod id_ed25519
+        run: chmod 600 /home/ubuntu/.ssh/id_ed25519
       - name: Renovate
         uses: ./.forgejo/actions/renovate
         with:
diff --git a/.gitignore b/.gitignore
index 5091499..863a76b 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,5 +18,5 @@ omniconfig.yaml
 config.xml
 .idea/
 .env
-.secrets
+*.secrets
 .github
diff --git a/.taskfiles/act/Taskfile.yaml b/.taskfiles/act/Taskfile.yaml
index 4830c09..7986498 100644
--- a/.taskfiles/act/Taskfile.yaml
+++ b/.taskfiles/act/Taskfile.yaml
@@ -5,4 +5,4 @@ tasks:
   run:
     desc: Run ACT with custom image
     cmds:
-      - act -P docker=catthehacker/ubuntu:act-latest
+      - act -P docker=catthehacker/ubuntu:act-latest --secret-file .secrets -s GH_TOKEN -s RENOVATE_TOKEN -s SSH_USER
diff --git a/.vscode/settings.json b/.vscode/settings.json
index dc892f7..7cc2216 100644
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -21,4 +21,5 @@
     "editor.defaultFormatter": "esbenp.prettier-vscode"
   },
   "editor.fontFamily": "FiraCode Nerd Font",
+  "editor.hover.delay": 1500,
 }