diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9bfeeb..e1140d3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -3,13 +3,14 @@ on:
   push:
     branches: [master]
   pull_request:
-    types: [opened, synchronize, reopened, edited]
+    types: [opened, synchronize, reopened]
   workflow_dispatch:
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 permissions:
   contents: read
 jobs:
-  policy:
-    if: github.event_name == 'pull_request' || github.event_name == 'push'
-    uses: swift-library/.github/.github/workflows/policy.yml@77682726e1767b1daea9dc935173cfafee60102d
   validate:
-    uses: swift-library/.github/.github/workflows/swift-package-ci.yml@77682726e1767b1daea9dc935173cfafee60102d
+    uses: swift-library/.github/.github/workflows/swift-package-ci.yml@0bddc0f2824ccf348cd4480a58dc4e7f378eeecc
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3f34f06..853edb1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ permissions:
   contents: read
 jobs:
   validate:
-    uses: swift-library/.github/.github/workflows/swift-package-ci.yml@77682726e1767b1daea9dc935173cfafee60102d
+    uses: swift-library/.github/.github/workflows/swift-package-ci.yml@0bddc0f2824ccf348cd4480a58dc4e7f378eeecc
     with:
       ref: ${{ inputs.tag }}
   publish:
@@ -18,7 +18,7 @@ jobs:
     permissions:
       contents: write
       actions: read
-    uses: swift-library/.github/.github/workflows/swift-package-release.yml@77682726e1767b1daea9dc935173cfafee60102d
+    uses: swift-library/.github/.github/workflows/swift-package-release.yml@0bddc0f2824ccf348cd4480a58dc4e7f378eeecc
     with:
       tag: ${{ inputs.tag }}
       accepted_commit: ${{ needs.validate.outputs.commit }}
diff --git a/.github/workflows/source-policy.yml b/.github/workflows/source-policy.yml
new file mode 100644
index 0000000..44a9745
--- /dev/null
+++ b/.github/workflows/source-policy.yml
@@ -0,0 +1,15 @@
+name: Source policy
+on:
+  push:
+    branches: [master]
+  pull_request:
+    types: [opened, synchronize, reopened, edited]
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+jobs:
+  policy:
+    uses: swift-library/.github/.github/workflows/policy.yml@0bddc0f2824ccf348cd4480a58dc4e7f378eeecc