diff --git a/.github/workflows/index-check.yml b/.github/workflows/index-check.yml
index 902c4b3..e01c351 100644
--- a/.github/workflows/index-check.yml
+++ b/.github/workflows/index-check.yml
@@ -16,6 +16,7 @@ on:
     paths:
       - "pkg/**"
       - "index.json"
+      - "vex-repository.json"
       - "tools/build_index.py"
       - ".github/workflows/index-check.yml"
   push:
@@ -24,6 +25,7 @@ on:
     paths:
       - "pkg/**"
       - "index.json"
+      - "vex-repository.json"
       - "tools/build_index.py"
 
 permissions:
@@ -35,10 +37,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          persist-credentials: false
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with:
           python-version: "3.14"
 
diff --git a/vex-repository.json b/vex-repository.json
index 1680018..38b0e33 100644
--- a/vex-repository.json
+++ b/vex-repository.json
@@ -6,7 +6,7 @@
       "spec_version": "0.1",
       "locations": [
         {
-          "url": "https://github.com/stackvista/vexhub/archive/refs/heads/main.tar.gz"
+          "url": "https://github.com/stackvista/vexhub/archive/refs/heads/main.tar.gz//vexhub-main"
         }
       ],
       "update_interval": "24h"