diff --git a/.github/workflows/approve-bot-pr.yml b/.github/workflows/approve-bot-pr.yml
index 93881160..4c93b32d 100644
--- a/.github/workflows/approve-bot-pr.yml
+++ b/.github/workflows/approve-bot-pr.yml
@@ -10,7 +10,7 @@ jobs:
   download:
     name: Download PR Artifact
     if: ${{ github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion == 'success' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     outputs:
       pr-author: ${{ steps.pr-data.outputs.author }}
       pr-number: ${{ steps.pr-data.outputs.number }}
@@ -32,7 +32,7 @@ jobs:
     name: Approve Bot PRs
     needs: download
     if: ${{ needs.download.outputs.pr-author == 'paketo-bot' || needs.download.outputs.pr-author == 'dependabot[bot]' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - name: Check Commit Verification
       id: unverified-commits
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 13d5249b..ac16d686 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -15,7 +15,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
 
     strategy:
       fail-fast: false
diff --git a/.github/workflows/create-draft-release.yml b/.github/workflows/create-draft-release.yml
index ba56ab13..dc50769f 100644
--- a/.github/workflows/create-draft-release.yml
+++ b/.github/workflows/create-draft-release.yml
@@ -18,7 +18,7 @@ concurrency: release
 jobs:
   unit:
     name: Unit Tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - name: Setup Go
       uses: actions/setup-go@v3
@@ -31,7 +31,7 @@ jobs:
 
   release:
     name: Release
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs: unit
     steps:
     - name: Setup Go
@@ -75,7 +75,7 @@ jobs:
 
   failure:
     name: Alert on Failure
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs: [ unit, release ]
     if: ${{ always() && needs.unit.result == 'failure' || needs.release.result == 'failure' }}
     steps:
diff --git a/.github/workflows/label-pr.yml b/.github/workflows/label-pr.yml
index cfc9f3af..a6a5c5ca 100644
--- a/.github/workflows/label-pr.yml
+++ b/.github/workflows/label-pr.yml
@@ -16,7 +16,7 @@ concurrency: pr_labels_${{ github.event.number }}
 jobs:
   autolabel:
     name: Ensure Minimal Semver Labels
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - name: Check Minimal Semver Labels
       uses: mheap/github-action-required-labels@v1
diff --git a/.github/workflows/lint-yaml.yml b/.github/workflows/lint-yaml.yml
index f0ef7133..145dfb9e 100644
--- a/.github/workflows/lint-yaml.yml
+++ b/.github/workflows/lint-yaml.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   lintYaml:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - uses: actions/checkout@v3
 
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 2735f4fc..2f3dbc2c 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   golangci:
     name: lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - name: Setup Go
       uses: actions/setup-go@v3
diff --git a/.github/workflows/synchronize-labels.yml b/.github/workflows/synchronize-labels.yml
index e7b87c44..0f8c59b2 100644
--- a/.github/workflows/synchronize-labels.yml
+++ b/.github/workflows/synchronize-labels.yml
@@ -7,12 +7,13 @@ on:
       - v*
     paths:
       - .github/labels.yml
+  workflow_dispatch: {}
 
 jobs:
   synchronize:
     name: Synchronize Labels
     runs-on:
-      - ubuntu-latest
+      - ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: micnncim/action-label-syncer@v1
diff --git a/.github/workflows/test-pull-request.yml b/.github/workflows/test-pull-request.yml
index 6e25eebb..cf661021 100644
--- a/.github/workflows/test-pull-request.yml
+++ b/.github/workflows/test-pull-request.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   unit:
     name: Unit Tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - name: Setup Go
       uses: actions/setup-go@v3
@@ -24,7 +24,7 @@ jobs:
 
   upload:
     name: Upload Workflow Event Payload
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - name: Upload Artifact
       uses: actions/upload-artifact@v2
diff --git a/.github/workflows/update-github-config.yml b/.github/workflows/update-github-config.yml
index e413e28c..2196a8cf 100644
--- a/.github/workflows/update-github-config.yml
+++ b/.github/workflows/update-github-config.yml
@@ -10,7 +10,7 @@ concurrency: github_config_update
 jobs:
   build:
     name: Create PR to update shared files
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
 
     - name: Checkout
@@ -60,3 +60,4 @@ jobs:
         token: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
         title: "Updates github-config"
         branch: automation/github-config/update
+        base: ${{ github.event.repository.default_branch }}