diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml
index 5cde1657..807cc3b2 100644
--- a/.github/dependabot.yaml
+++ b/.github/dependabot.yaml
@@ -1,7 +1,12 @@
 version: 2
 updates:
 - package-ecosystem: cargo
-  directory: "/"
+  directory: "/trusted"
   schedule:
     interval: daily
   open-pull-requests-limit: 10
+- package-ecosystem: "github-actions"
+  directory: "/"
+  schedule:
+    # Check for updates to GitHub Actions every weekday
+    interval: "daily"
diff --git a/.github/workflows/cargo-audit.yaml b/.github/workflows/cargo-audit.yaml
index 439f440a..b297f5da 100644
--- a/.github/workflows/cargo-audit.yaml
+++ b/.github/workflows/cargo-audit.yaml
@@ -13,7 +13,7 @@ jobs:
     name: Security Audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - name: Cache cargo bin
         uses: actions/cache@v1
         with:
diff --git a/.github/workflows/panic-abort.yaml b/.github/workflows/trusted.yaml
similarity index 67%
rename from .github/workflows/panic-abort.yaml
rename to .github/workflows/trusted.yaml
index 823b2749..da83e2c5 100644
--- a/.github/workflows/panic-abort.yaml
+++ b/.github/workflows/trusted.yaml
@@ -1,14 +1,14 @@
-name: panic-abort
+name: rust
 
 on:
   pull_request:
     paths:
-      - "panic/abort/**"
+      - "trusted"
       - "Cargo.*"
 
 defaults:
   run:
-    working-directory: "panic/abort"
+    working-directory: "trusted"
 
 env:
   CARGO_INCREMENTAL: 0
@@ -19,12 +19,13 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        - nightly-2021-07-21
-        - nightly
-      target:
-        - x86_64-unknown-linux-gnu
+        rust:
+          - nightly-2021-07-21
+          - nightly
+        target:
+          - x86_64-unknown-linux-gnu
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: ${{ matrix.rust }}
diff --git a/.github/workflows/workspace.yaml b/.github/workflows/workspace.yaml
index 770dc872..ea366bc9 100644
--- a/.github/workflows/workspace.yaml
+++ b/.github/workflows/workspace.yaml
@@ -12,21 +12,23 @@ jobs:
   rustfmt:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: nightly
           components: rustfmt
           override: true
           profile: minimal
+      # actions-rs/cargo does not support the `working-directory` argument,
+      # see https://github.com/actions-rs/cargo/issues/6
       - uses: actions-rs/cargo@v1
         with:
           command: fmt
-          args: --all -- --check
+          args: --manifest-path trusted/Cargo.toml --all -- --check
   clippy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v3
       - uses: actions-rs/toolchain@v1
         with:
           toolchain: nightly
@@ -34,3 +36,4 @@ jobs:
           override: true
           profile: minimal
       - run: cargo clippy --all --all-features -- -D warnings
+        working-directory: ./trusted
diff --git a/Cargo.toml b/trusted/Cargo.toml
similarity index 100%
rename from Cargo.toml
rename to trusted/Cargo.toml
diff --git a/panic/abort/Cargo.toml b/trusted/panic/abort/Cargo.toml
similarity index 100%
rename from panic/abort/Cargo.toml
rename to trusted/panic/abort/Cargo.toml
diff --git a/panic/abort/README.md b/trusted/panic/abort/README.md
similarity index 100%
rename from panic/abort/README.md
rename to trusted/panic/abort/README.md
diff --git a/panic/abort/src/lib.rs b/trusted/panic/abort/src/lib.rs
similarity index 100%
rename from panic/abort/src/lib.rs
rename to trusted/panic/abort/src/lib.rs
diff --git a/rustfmt.toml b/trusted/rustfmt.toml
similarity index 100%
rename from rustfmt.toml
rename to trusted/rustfmt.toml