diff --git a/.gitea/workflows/trufflehog.yml b/.gitea/workflows/trufflehog.yml
index 7c6fa66..10c8779 100644
--- a/.gitea/workflows/trufflehog.yml
+++ b/.gitea/workflows/trufflehog.yml
@@ -12,8 +12,10 @@ jobs:
         with:
           fetch-depth: 0
 
+      - name: Fix Git permissions for TruffleHog Docker container
+        run: sudo chown -R root:root .
+
       - name: TruffleHog Secret Scan
         uses: trufflesecurity/trufflehog@main
         with:
-          # Optional: Add any extra CLI arguments here
           extra_args: --only-verified
diff --git a/.gitea/workflows/validate.yaml b/.gitea/workflows/validate.yaml
index 3865640..deada61 100644
--- a/.gitea/workflows/validate.yaml
+++ b/.gitea/workflows/validate.yaml
@@ -26,31 +26,14 @@ jobs:
           tar xf kubeconform-linux-amd64.tar.gz
           sudo mv kubeconform /usr/local/bin/
 
-      - name: Create Yamllint Config
-        run: |
-          # We must ignore the Helm templates directory because Go templating {{ }} 
-          # breaks standard YAML parsers.
-          echo -e "extends: default\nignore: |\n  charts/**/templates/\n" > .yamllint.yaml
+      - name: Lint Pure YAML Files
+        run: yamllint ./tenants
 
-      - name: Step 1 - Lint Pure YAML Files
-        run: yamllint .
-
-      - name: Step 2 - Lint Helm Chart Syntax
+      - name: Lint Helm Chart Syntax
         run: helm lint charts/tenant/
 
-      - name: Step 3 - Validate Static Manifests & ArgoCD CRDs
+      - name: Validate Tenant Configurations against Chart
         run: |
-          # We use a third-party CRD catalog so kubeconform understands 
-          # ArgoCD's Application and ApplicationSet kinds in your gitops/ folder.
-          kubeconform -strict -summary \
-            -schema-location default \
-            -schema-location 'https://raw.githubusercontent.com/datreeio/CRDs-catalog/main/{{.Group}}/{{.ResourceKind}}_{{.ResourceAPIVersion}}.json' \
-            minio/ gitops/
-
-      - name: Step 4 - Validate Tenant Configurations against Chart
-        run: |
-          # Loop through each tenant, inject their config into the Helm chart, 
-          # and validate the resulting Kubernetes manifests.
           for tenant_dir in tenants/*; do
             if [ -d "$tenant_dir" ]; then
               tenant_name=$(basename "$tenant_dir")