diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index a9f8446..266cb86 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -32,8 +32,8 @@ jobs:
         background: true
 
       - name: Create GitHub App Token
-        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: app-token
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ vars.TASTENDRUCK_CLIENT_ID }}
           private-key: ${{ secrets.TASTENDRUCK_PRIVATE_KEY }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 32ea342..0728bed 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -99,15 +99,16 @@ jobs:
           COMPOSER_JSON: ${{ matrix.composer-json }}
           CASE: ${{ matrix.case }}
 
-      - uses: $/
-        id: subject
+      - id: subject
+        uses: $/
         with:
           composer-json: ${{ matrix.composer-json }}
           mode: ${{ matrix.mode }}
           source: ${{ matrix.source }}
           verify-attestation: ${{ matrix.verify-attestation }}
 
-      - run: |
+      - id: golden
+        run: |
           {
               echo 'expected<<EOF'
               cat "local-action/testdata/${CASE}.${MODE}.golden.json"
@@ -116,7 +117,6 @@ jobs:
         env:
           CASE: ${{ matrix.case }}
           MODE: ${{ matrix.mode }}
-        id: golden
 
       - name: Assert constraint output
         if: steps.subject.outputs.constraint != fromJSON(steps.golden.outputs.expected).constraint