diff --git a/.github/renovate-entrypoint.sh b/.github/renovate-entrypoint.sh
deleted file mode 100644
index 6820a24..0000000
--- a/.github/renovate-entrypoint.sh
+++ /dev/null
@@ -1,13 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-echo "=== Starting Renovate Bot ==="
-
-cd /github/workspace
-
-apt update
-apt install -y build-essential libpq-dev
-
-runuser -u ubuntu -- renovate --platform=github
-
-echo "=== Renovate Bot finished ==="
diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml
new file mode 100644
index 0000000..c1adbb3
--- /dev/null
+++ b/.github/workflows/bandit.yml
@@ -0,0 +1,15 @@
+name: Code Analysis (Bandit)
+
+on: push
+jobs:
+  bandit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: mdegis/bandit-action@v1.0
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          path: "src/"
+          level: high
+          confidence: high
+          exit_zero: true
diff --git a/.github/workflows/release-docker.yml b/.github/workflows/release-docker.yml
index 5bee13b..f9aa64f 100644
--- a/.github/workflows/release-docker.yml
+++ b/.github/workflows/release-docker.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   build-and-push-docker:
-    runs-on: self-hosted
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
deleted file mode 100644
index f705a65..0000000
--- a/.github/workflows/renovate.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-name: Renovate
-
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: '0 2 * * 1'
-
-permissions:
-  contents: write
-  pull-requests: write
-
-jobs:
-  renovate:
-    runs-on: self-hosted
-    steps:
-      - name: Checkout Repository
-        uses: actions/checkout@v4
-
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: '20'
-
-      - name: Install Renovate
-        run: npm install -g renovate
-
-      - name: Run Renovate
-        env:
-          RENOVATE_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          LOG_LEVEL: debug
-        run: |
-          cd ${{ github.workspace }}
-          renovate --platform=github --repositories "${{ github.repository }}"
diff --git a/.github/workflows/ruff.yml b/.github/workflows/ruff.yml
new file mode 100644
index 0000000..d79e6d0
--- /dev/null
+++ b/.github/workflows/ruff.yml
@@ -0,0 +1,9 @@
+name: Linting (Ruff)
+
+on: [push, pull_request]
+jobs:
+  ruff:
+    runs-on: self-hosted
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/ruff-action@v3
diff --git a/.gitignore b/.gitignore
index 6a67833..41d1c7a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,7 +5,7 @@ pastebin.txt
 .DS_Store
 test*.py
 docker-*
-.vscode
+.vscode/settings.json
 
 
 # Byte-compiled / optimized / DLL files
diff --git a/.vscode/tasks.json b/.vscode/tasks.json
new file mode 100644
index 0000000..c8c52da
--- /dev/null
+++ b/.vscode/tasks.json
@@ -0,0 +1,36 @@
+{
+    "version": "2.0.0",
+    "tasks": [
+        {
+            "label": "Docker: Build Image",
+            "type": "docker-build",
+            "platform": "python",
+            "dockerBuild": {
+                "context": "${workspaceFolder}",
+                "dockerfile": "${workspaceFolder}/Dockerfile",
+                "tag": "post-it:dev"
+            }
+        },
+        {
+            "label": "Run post-it (interactive, show logs)",
+            "type": "shell",
+            "dependsOn": ["Docker: Build Image"],
+            "command": "docker",
+            "args": [
+                "run",
+                "--rm",
+                "-it",
+                "--name",
+                "post-it-dev",
+                "-v",
+                "${workspaceFolder}/config:/app/config",
+                "post-it:dev"
+            ],
+            "presentation": {
+                "reveal": "always",
+                "panel": "shared"
+            },
+            "problemMatcher": []
+        }
+    ]
+}
diff --git a/renovate.json b/renovate.json
deleted file mode 100644
index 66368f2..0000000
--- a/renovate.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "extends": ["config:base"],
-  "labels": ["dependencies", "renovate"],
-  "packageRules": [
-    {
-      "managers": ["pip_requirements"],
-      "updateTypes": ["minor", "patch"],
-      "automerge": false,
-      "groupName": "Python dependencies"
-    }
-  ],
-  "prConcurrentLimit": 5,
-  "prHourlyLimit": 2
-}