diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..75b5952
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,9 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    allow:
+      - dependency-type: "all"
+    directory: "/"
+    open-pull-requests-limit: 1
+    schedule:
+      interval: "monthly"
diff --git a/.github/workflows/open-code.yml b/.github/workflows/open-code.yml
index 9bdab68..27127f5 100644
--- a/.github/workflows/open-code.yml
+++ b/.github/workflows/open-code.yml
@@ -3,6 +3,7 @@ name: OpenCoDE
 on:
   push:
     branches: ["main"]
+    tags: ["**"]
   workflow_dispatch:
 
 jobs:
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..15de8d3
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,25 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- create CHANGELOG.md
+- configure dependabot updates for github-actions
+
+### Changes
+
+- update workflow triggers and schedules
+
+### Deprecated
+
+### Removed
+
+### Fixed
+
+### Security
diff --git a/mex-{{ cookiecutter.project_name }}/.github/dependabot.yml b/mex-{{ cookiecutter.project_name }}/.github/dependabot.yml
index c20251d..f1f53f8 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/dependabot.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/dependabot.yml	
@@ -1,9 +1,16 @@
 version: 2
 updates:
+  - package-ecosystem: "github-actions"
+    allow:
+      - dependency-type: "all"
+    directory: "/"
+    open-pull-requests-limit: 1
+    schedule:
+      interval: "monthly"
   - package-ecosystem: "pip"
     allow:
       - dependency-type: "all"
     directory: "/"
     open-pull-requests-limit: 1
     schedule:
-      interval: "weekly"
+      interval: "daily"
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/cookiecutter.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/cookiecutter.yml
index c2b021d..0871794 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/cookiecutter.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/cookiecutter.yml	
@@ -2,7 +2,9 @@ name: Cookiecutter
 
 on:
   push:
-    branches: ["main"]
+  pull_request:
+  schedule:
+    - cron: '0 0 * * *'
   workflow_dispatch:
 
 env:
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml
index b00ad3f..88d9949 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/cve-scan.yml	
@@ -1,9 +1,10 @@
 name: CVE Scan
 
 on:
+  push:
   pull_request:
   schedule:
-    - cron: '0 2 * * *'
+    - cron: '0 0 * * *'
   workflow_dispatch:
 
 jobs:
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/docker.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/docker.yml
index 5e1b14a..ad1cfd5 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/docker.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/docker.yml	
@@ -2,8 +2,7 @@ name: Docker
 
 on:
   push:
-    tags:
-      - '**'
+    tags: ["**"]
   workflow_dispatch:
 
 jobs:
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/documentation.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/documentation.yml
index 2c5701b..a67d520 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/documentation.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/documentation.yml	
@@ -2,7 +2,7 @@ name: Documentation
 
 on:
   push:
-    branches: ["main"]
+    tags: ["**"]
   workflow_dispatch:
 
 env:
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml
index 850ab32..dc0cde0 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/linting.yml	
@@ -2,6 +2,7 @@ name: Linting
 
 on:
   push:
+  pull_request:
   workflow_dispatch:
 
 env:
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/open-code.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/open-code.yml
index b972c27..ea5c794 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/open-code.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/open-code.yml	
@@ -3,6 +3,7 @@ name: OpenCoDE
 on:
   push:
     branches: ["main"]
+    tags: ["**"]
   workflow_dispatch:
 
 jobs:
diff --git a/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml b/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml
index 1ec8315..3df4988 100644
--- a/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml	
+++ b/mex-{{ cookiecutter.project_name }}/.github/workflows/testing.yml	
@@ -2,6 +2,7 @@ name: Testing
 
 on:
   push:
+  pull_request:
   workflow_dispatch:
 
 env: