diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 66c179e..f8bfff7 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,7 +6,11 @@ on:
 jobs:
   pr-pull:
     if: contains(github.event.pull_request.labels.*.name, 'pr-pull')
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
+    permissions:
+      contents: write
+      packages: none
+      pull-requests: write
     steps:
       - name: Set up Homebrew
         uses: Homebrew/actions/setup-homebrew@master
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 6513317..8796b20 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -2,16 +2,15 @@ name: brew test-bot
 on:
   push:
     branches:
-      - master
+      - main
   pull_request:
 jobs:
   test-bot:
     strategy:
       matrix:
         os:
-          - macos-10.15
-          - macos-11
-          - macos-12
+        - macos-13
+        - macos-14
     runs-on: ${{ matrix.os }}
     steps:
       - name: Set up Homebrew
@@ -20,28 +19,24 @@ jobs:
 
       - name: Cache Homebrew Bundler RubyGems
         id: cache
-        uses: actions/cache@v1
+        uses: actions/cache@v3
         with:
           path: ${{ steps.set-up-homebrew.outputs.gems-path }}
           key: ${{ runner.os }}-rubygems-${{ steps.set-up-homebrew.outputs.gems-hash }}
           restore-keys: ${{ runner.os }}-rubygems-
 
-      - name: Install Homebrew Bundler RubyGems
-        if: steps.cache.outputs.cache-hit != 'true'
-        run: brew install-bundler-gems
-
       - run: brew test-bot --only-cleanup-before
 
       - run: brew test-bot --only-setup
 
       - run: brew test-bot --only-tap-syntax
 
-      - run: brew test-bot --only-formulae --root-url=https://ghcr.io/v2/stek29/idevice
+      - run: brew test-bot --only-formulae
         if: github.event_name == 'pull_request'
 
       - name: Upload bottles as artifact
         if: always() && github.event_name == 'pull_request'
-        uses: actions/upload-artifact@main
+        uses: actions/upload-artifact@v3
         with:
           name: bottles
           path: '*.bottle.*'
diff --git a/Formula/fsmon.rb b/Formula/fsmon.rb
index 119729a..deaf091 100644
--- a/Formula/fsmon.rb
+++ b/Formula/fsmon.rb
@@ -1,7 +1,7 @@
 class Fsmon < Formula
   desc "FileSystem events monitor"
   homepage "https://github.com/nowsecure/fsmon"
-  url "https://github.com/nowsecure/fsmon/archive/1.8.5.tar.gz"
+  url "https://github.com/nowsecure/fsmon/archive/refs/tags/1.8.5.tar.gz"
   sha256 "eb99cfb242bea9fc5bde66e67f4324bd71100d17b1672e4e52db14b9a5e2900a"
   license "MIT"
   head "https://github.com/nowsecure/fsmon.git", branch: "master"
diff --git a/Formula/iokit-utils.rb b/Formula/iokit-utils.rb
index 2c17858..8c6f380 100644
--- a/Formula/iokit-utils.rb
+++ b/Formula/iokit-utils.rb
@@ -1,7 +1,7 @@
 class IokitUtils < Formula
   desc "Little dev tools for probing IOKit"
   homepage "https://github.com/Siguza/iokit-utils"
-  url "https://github.com/Siguza/iokit-utils/archive/1.4.0.tar.gz"
+  url "https://github.com/Siguza/iokit-utils/archive/refs/tags/1.4.0.tar.gz"
   sha256 "076731d902717cf60a9c8b1b2a176a0ee0caf96354219f509bdd8675200231c4"
   license "MPL-2.0-no-copyleft-exception"
   head "https://github.com/Siguza/iokit-utils.git", branch: "master"
diff --git a/Formula/iometa.rb b/Formula/iometa.rb
index 5c9a14f..b23b293 100644
--- a/Formula/iometa.rb
+++ b/Formula/iometa.rb
@@ -1,7 +1,7 @@
 class Iometa < Formula
   desc "Extracts C++ class runtime information from arm64 Darwin kernel"
   homepage "https://github.com/Siguza/iometa"
-  url "https://github.com/Siguza/iometa/archive/1.6.6.tar.gz"
+  url "https://github.com/Siguza/iometa/archive/refs/tags/1.6.6.tar.gz"
   sha256 "147c88729d897e78688ab969ffb009426d9f1e21895bab6e4e54baed4699dd30"
   license "MPL-2.0-no-copyleft-exception"
   head "https://github.com/Siguza/iometa.git", branch: "master"
diff --git a/Formula/ios-kern-utils.rb b/Formula/ios-kern-utils.rb
index 9eb7ef9..6e8b58e 100644
--- a/Formula/ios-kern-utils.rb
+++ b/Formula/ios-kern-utils.rb
@@ -1,7 +1,7 @@
 class IosKernUtils < Formula
   desc "iOS Kernel utilities"
   homepage "https://github.com/Siguza/ios-kern-utils"
-  url "https://github.com/Siguza/ios-kern-utils/archive/1.4.1.tar.gz"
+  url "https://github.com/Siguza/ios-kern-utils/archive/refs/tags/1.4.1.tar.gz"
   sha256 "24cf9d393d94cdd351691ed1f062bb02af6d0853783b762546ab89b4e29a156a"
   license "MIT"
   head "https://github.com/Siguza/ios-kern-utils.git", branch: "master"