diff --git a/.github/workflows/CI-build.yml b/.github/workflows/ci-build.yml
similarity index 91%
rename from .github/workflows/CI-build.yml
rename to .github/workflows/ci-build.yml
index ffbe262e..2b496018 100644
--- a/.github/workflows/CI-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -5,7 +5,7 @@ on:
 jobs:
 
   build:
-    runs-on: ubuntu-latest
+    name: "build"
     timeout-minutes: 30
 
     permissions:
@@ -14,6 +14,11 @@ jobs:
       # EnricoMi/publish-unit-test-result-action -> https://github.com/EnricoMi/publish-unit-test-result-action#permissions
       checks: write
 
+    runs-on: ubuntu-latest
+    defaults: 
+      run:
+        shell: bash
+
     steps:
 
       - name: "Set up JDK 17."
@@ -53,7 +58,7 @@ jobs:
           :web:status-history:appengineStage
 
       - name: "Upload 'Unit Test Results' artifact."
-        if: success() || failure()
+        if: ${{ success() || failure() }}
         uses: actions/upload-artifact@v4
         with:
           name: 'Unit Test Results'
@@ -61,7 +66,7 @@ jobs:
           path: ${{ github.workspace }}/**/build/reports/tests/*/
 
       - name: "Upload 'Android Lint Results' artifact."
-        if: success() || failure()
+        if: ${{ success() || failure() }}
         uses: actions/upload-artifact@v4
         with:
           name: 'Android Lint Results'
@@ -69,17 +74,18 @@ jobs:
           path: ${{ github.workspace }}/**/build/reports/lint-results*
 
       - name: "Publish 'Unit Results' check suite."
-        if: success() || failure()
+        if: ${{ success() || failure() }}
         uses: EnricoMi/publish-unit-test-result-action@v2
         with:
           check_name: '🔔 Test: Unit Results'
           comment_mode: off
           report_individual_runs: true
+          action_fail_on_inconclusive: true
           test_changes_limit: 0
           junit_files: ${{ github.workspace }}/**/build/test-results/*/TEST-*.xml
 
       - name: "Upload 'APKs' artifact."
-        if: success() || failure()
+        if: ${{ success() || failure() }}
         uses: actions/upload-artifact@v4
         with:
           name: 'APKs'
diff --git a/.github/workflows/CI.yml b/.github/workflows/ci.yml
similarity index 59%
rename from .github/workflows/CI.yml
rename to .github/workflows/ci.yml
index 05e0636f..197ae7a8 100644
--- a/.github/workflows/CI.yml
+++ b/.github/workflows/ci.yml
@@ -2,8 +2,6 @@ name: "CI"
 
 on:
   push:
-    branches:
-      - '**'
 
 concurrency:
   group: ${{ github.ref == 'refs/heads/main' && format('ci-main-{0}', github.sha) || format('ci-{0}', github.ref) }}
@@ -13,9 +11,17 @@ jobs:
 
   validate:
     name: "🦺 Validation"
-    uses: TWiStErRob/github-workflows/.github/workflows/validate.yml@19333c04e57739ec6074b09c6ca09c225c94dc09 # v1
+    uses: TWiStErRob/github-workflows/.github/workflows/validate.yml@94f2ec4f96e146200f801fe7e09310c79cb2d2b3 # v2
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
+
 
   build:
     name: "🔨 Build & Verify"
     needs: validate
-    uses: ./.github/workflows/CI-build.yml
+    uses: ./.github/workflows/ci-build.yml
+    permissions:
+      contents: read
+      checks: write