diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
index ad08e67..2540d59 100644
--- a/.devcontainer/devcontainer.json
+++ b/.devcontainer/devcontainer.json
@@ -2,7 +2,9 @@
   "name": "Docker Dev Container",
   "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
   "features": {
-    "ghcr.io/devcontainers-community/npm-features/prettier:1": {},
+    "ghcr.io/devcontainers-community/npm-features/prettier:1": {
+      "plugins": "prettier-plugin-sh prettier-plugin-jinja-template"
+    },
     "ghcr.io/devcontainers-extra/features/actionlint:1": {},
     "ghcr.io/devcontainers-extra/features/checkov:1": {},
     "ghcr.io/devcontainers-extra/features/markdownlint-cli:1": {},
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index a0f1805..84c7ea0 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -1,4 +1,3 @@
----
 version: 2
 updates:
   - package-ecosystem: "github-actions"
diff --git a/.github/workflows/action-docker-publish.yml b/.github/workflows/action-docker-publish.yml
index 5b0eb92..6f82b05 100644
--- a/.github/workflows/action-docker-publish.yml
+++ b/.github/workflows/action-docker-publish.yml
@@ -168,11 +168,3 @@ jobs:
           package-type: container
           min-versions-to-keep: 1
           delete-only-untagged-versions: true
-
-  workflow-keepalive:
-    if: github.event_name == 'schedule'
-    runs-on: ubuntu-latest
-    permissions:
-      actions: write
-    steps:
-      - uses: liskin/gh-workflow-keepalive@v1
diff --git a/.github/workflows/action-dockerhub-description.yml b/.github/workflows/action-dockerhub-description.yml
index 23fd6a3..a1bcae6 100644
--- a/.github/workflows/action-dockerhub-description.yml
+++ b/.github/workflows/action-dockerhub-description.yml
@@ -1,4 +1,5 @@
 name: Update Docker Hub Description
+
 on:
   workflow_dispatch:
   push:
@@ -18,6 +19,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Docker Hub Description
         uses: peter-evans/dockerhub-description@v4
diff --git a/.github/workflows/action-prettier.yml b/.github/workflows/action-prettier.yml
index 9560634..a7e0a71 100644
--- a/.github/workflows/action-prettier.yml
+++ b/.github/workflows/action-prettier.yml
@@ -1,4 +1,5 @@
 name: Prettier
+
 on:
   workflow_dispatch:
   push:
@@ -19,6 +20,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Install Prettier and plugins
         run: |
diff --git a/.github/workflows/action-super-linter.yml b/.github/workflows/action-super-linter.yml
index 8da1721..a2b12fc 100644
--- a/.github/workflows/action-super-linter.yml
+++ b/.github/workflows/action-super-linter.yml
@@ -1,4 +1,3 @@
----
 name: Super Linter
 
 on:
@@ -31,6 +30,7 @@ jobs:
           # super-linter needs the full git history to get the
           # list of files that changed across commits
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Install Prettier plugins (for summary formatting)
         run: |
@@ -41,8 +41,11 @@ jobs:
         env:
           # To report GitHub Actions status checks
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VALIDATE_GITHUB_ACTIONS_ZIZMOR: false
           VALIDATE_JSCPD: false
-          VALIDATE_SHELL_SHFMT: false
-          VALIDATE_YAML_PRETTIER: false
           VALIDATE_JSON_PRETTIER: false
           VALIDATE_MARKDOWN_PRETTIER: false
+          VALIDATE_NATURAL_LANGUAGE: false
+          VALIDATE_SHELL_SHFMT: false
+          VALIDATE_TERRAFORM_TERRASCAN: false
+          VALIDATE_YAML_PRETTIER: false
diff --git a/.github/workflows/action-update-copyright-years-in-license-file.yml b/.github/workflows/action-update-copyright-years-in-license-file.yml
index bb6126a..7ee528c 100644
--- a/.github/workflows/action-update-copyright-years-in-license-file.yml
+++ b/.github/workflows/action-update-copyright-years-in-license-file.yml
@@ -1,4 +1,5 @@
 name: Update copyright year(s) in license file
+
 on:
   workflow_dispatch:
   schedule:
@@ -15,6 +16,7 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
       - name: Action Update License Year
         uses: FantasticFiasco/action-update-license-year@v3
         with:
diff --git a/.gitignore b/.gitignore
index 8bffd3f..c6dd34d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,5 @@
 # Visual Studio Code
 .vscode/*
-!.vscode/settings.json
 !.vscode/tasks.json
 !.vscode/launch.json
 !.vscode/extensions.json
diff --git a/LICENSE.md b/LICENSE.md
index daa3cc5..98a0fb2 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -1,6 +1,6 @@
 # The MIT License (MIT)
 
-Copyright (c) 2022-2025 Daniel Gibbs
+Copyright (c) 2025 Daniel Gibbs
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal