diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 7f1cd20..b3d66ae 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -31,7 +31,8 @@ jobs:
       uses: astral-sh/setup-uv@v7
 
     - name: Install just
-      uses: extractions/setup-just@v3
+      run:
+        sudo snap install --classic just
 
     - name: Run linters
       run: just lint
@@ -52,7 +53,8 @@ jobs:
       uses: astral-sh/setup-uv@v7
 
     - name: Install just
-      uses: extractions/setup-just@v3
+      run:
+        sudo snap install --classic just
 
     - name: Run unit tests
       run: just unit
@@ -147,7 +149,8 @@ jobs:
         uses: astral-sh/setup-uv@v7
 
       - name: Install just
-        uses: extractions/setup-just@v3
+        run:
+          sudo snap install --classic just
 
       - name: Setup Juju environment
         uses: charmed-kubernetes/actions-operator@main
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1b1172b..9ec90a7 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -20,6 +20,8 @@ jobs:
   release:
     needs: check
     runs-on: ubuntu-24.04
+    permissions:
+      contents: write
     steps:
       - name: Checkout
         uses: actions/checkout@v6
diff --git a/.gitignore b/.gitignore
index 0186f21..ae9affa 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,9 @@
+# This file is centrally managed as a template file in https://github.com/canonical/solutions-engineering-automation
+# To update the file:
+# - Edit it in the canonical/solutions-engineering-automation repository.
+# - Open a PR with the changes.
+# - When the PR merges, the soleng-terraform bot will open a PR to the target repositories with the changes.
+
 # Python Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]