diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
index 4e0d823..24f0138 100644
--- a/.github/workflows/cd.yml
+++ b/.github/workflows/cd.yml
@@ -47,6 +47,7 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
                   registry-url: https://registry.npmjs.org
 
@@ -80,6 +81,7 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
                   registry-url: https://npm.pkg.github.com
                   scope: "@fdawgs"
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4d4a418..83781ce 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -55,11 +55,15 @@ jobs:
             - name: Setup Node
               uses: actions/setup-node@v4
               with:
+                  check-latest: true
                   node-version: lts/*
 
             - name: Install
               run: npm i --ignore-scripts
 
+            - name: Audit NPM package signatures and provenance attestations
+              run: npm audit signatures
+
             - name: Run ESLint
               run: npm run lint