diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
new file mode 100644
index 0000000..a869b98
--- /dev/null
+++ b/.github/actionlint.yaml
@@ -0,0 +1,3 @@
+self-hosted-runner:
+  labels:
+    - build-only
diff --git a/.github/actions/create-miopen-db-branch/action.yml b/.github/actions/create-miopen-db-branch/action.yml
index a7547bf..ea00653 100644
--- a/.github/actions/create-miopen-db-branch/action.yml
+++ b/.github/actions/create-miopen-db-branch/action.yml
@@ -61,4 +61,4 @@ runs:
         BRANCH_NAME: ${{ inputs.branch_name }}
       run: |
         echo "Pushing branch: ${BRANCH_NAME}"
-        git push origin "${BRANCH_NAME}"
\ No newline at end of file
+        git push origin "${BRANCH_NAME}"
diff --git a/.github/workflows/build-and-benchmark.yml b/.github/workflows/build-and-benchmark.yml
index f618799..59a0d90 100644
--- a/.github/workflows/build-and-benchmark.yml
+++ b/.github/workflows/build-and-benchmark.yml
@@ -94,11 +94,13 @@ jobs:
 
       - name: Generate image tag
         id: generate_tag
-        run: |         
+        run: |
           IMAGE_TAG=$(git rev-parse --short HEAD)
-          echo "tag=${IMAGE_TAG}" >> $GITHUB_OUTPUT
-          echo "core_image_with_tag=${{ env.CORE_IMAGE }}:${IMAGE_TAG}" >> $GITHUB_OUTPUT
-          echo "staging_image_with_tag=${{ env.STAGING_IMAGE }}:${IMAGE_TAG}" >> $GITHUB_OUTPUT
+          {
+            echo "tag=${IMAGE_TAG}"
+            echo "core_image_with_tag=${{ env.CORE_IMAGE }}:${IMAGE_TAG}"
+            echo "staging_image_with_tag=${{ env.STAGING_IMAGE }}:${IMAGE_TAG}"
+          } >> $GITHUB_OUTPUT
       
       - name: Check architectures
         id: check-archs
diff --git a/.github/workflows/build-core-image.yml b/.github/workflows/build-core-image.yml
index 0b60362..4f83686 100644
--- a/.github/workflows/build-core-image.yml
+++ b/.github/workflows/build-core-image.yml
@@ -79,4 +79,4 @@ jobs:
       runner: ${{ inputs.runner || vars.BUILD_RUNNER || 'build-only' }}
     secrets:
       DOCKERHUB_ORGANIZATION: ${{ secrets.DOCKERHUB_ORGANIZATION }}
-      DOCKERHUB_OAT: ${{ secrets.DOCKERHUB_OAT }}
\ No newline at end of file
+      DOCKERHUB_OAT: ${{ secrets.DOCKERHUB_OAT }}
diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml
index 54d489d..2dd0d91 100644
--- a/.github/workflows/pr-checks.yml
+++ b/.github/workflows/pr-checks.yml
@@ -47,7 +47,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
           sh_files=$(echo "$all_changed" | grep '\.sh$' || true)
-          wf_files=$(echo "$all_changed" | grep -E '^\.github/(workflows|actions)/.*\.ya?ml$' || true)
+          wf_files=$(echo "$all_changed" | grep -E '^\.github/workflows/.*\.ya?ml$' || true)
 
           {
             echo "shell=$( [ -n "$sh_files" ] && echo true || echo false )"
@@ -140,4 +140,6 @@ jobs:
       - name: Install actionlint
         run: bash <(curl -s https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
       - name: actionlint
+        env:
+          SHELLCHECK_OPTS: --exclude=SC2086
         run: echo '${{ needs.changed-files.outputs.workflow_files }}' | xargs ./actionlint
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 860d57e..d67c86c 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -16,6 +16,12 @@ repos:
     hooks:
       - id: shellcheck
 
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.7.12
+    hooks:
+      - id: actionlint
+        args: ['-shellcheck=']
+
   - repo: local
     hooks:
       - id: check-spdx-headers