diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 005d2b1..758e337 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -12,10 +12,10 @@ jobs:
     - name: check out
       uses: actions/checkout@v1
 
-    - name: Setup ruby
-      uses: actions/setup-ruby@v1
+    - uses: ruby/setup-ruby@v1
       with:
-        ruby-version: '2.x'
+        ruby-version: '3.1' # Not needed with a .ruby-version file
+        bundler-cache: true # runs 'bundle install' and caches installed gems automatically
 
     - name: Setup Asciidoctor
       run: |
@@ -42,5 +42,5 @@ jobs:
     - name: Deploy
       uses: peaceiris/actions-gh-pages@v3
       with:
-        deploy_key: ${{ secrets.ACTIONS_DEPLOY_KEY }}
+        github_token: ${{ secrets.GITHUB_TOKEN }}
         publish_dir: ./public
diff --git a/site/config/_default/config.yaml b/site/config/_default/config.yaml
index f60d482..6d1cd49 100644
--- a/site/config/_default/config.yaml
+++ b/site/config/_default/config.yaml
@@ -28,3 +28,26 @@ params:
 taxonomies:
   tag: tags
 publishDir: "../public"
+security:
+  enableInlineShortcodes: false
+  exec:
+    allow:
+    - ^(dart-)?sass(-embedded)?$
+    - ^go$
+    - ^npx$
+    - ^postcss$
+    - ^asciidoctor$
+    osEnv:
+    - (?i)^((HTTPS?|NO)_PROXY|PATH(EXT)?|APPDATA|TE?MP|TERM|GO\w+|(XDG_CONFIG_)?HOME|USERPROFILE|SSH_AUTH_SOCK|DISPLAY|LANG)$
+  funcs:
+    getenv:
+    - ^HUGO_
+    - ^CI$
+  goTemplates:
+    allowActionJSTmpl: false
+  http:
+    mediaTypes: null
+    methods:
+    - (?i)GET|POST
+    urls:
+    - .*
\ No newline at end of file