diff --git a/.github/workflows/contracts/chainloop-vault-codeql.yml b/.github/workflows/contracts/chainloop-vault-codeql.yaml
similarity index 100%
rename from .github/workflows/contracts/chainloop-vault-codeql.yml
rename to .github/workflows/contracts/chainloop-vault-codeql.yaml
diff --git a/.github/workflows/contracts/chainloop-vault-helm-package.yml b/.github/workflows/contracts/chainloop-vault-helm-package.yaml
similarity index 100%
rename from .github/workflows/contracts/chainloop-vault-helm-package.yml
rename to .github/workflows/contracts/chainloop-vault-helm-package.yaml
diff --git a/.github/workflows/contracts/chainloop-vault-release.yml b/.github/workflows/contracts/chainloop-vault-release.yaml
similarity index 100%
rename from .github/workflows/contracts/chainloop-vault-release.yml
rename to .github/workflows/contracts/chainloop-vault-release.yaml
diff --git a/.github/workflows/contracts/chainloop-vault-scorecards.yml b/.github/workflows/contracts/chainloop-vault-scorecards.yaml
similarity index 100%
rename from .github/workflows/contracts/chainloop-vault-scorecards.yml
rename to .github/workflows/contracts/chainloop-vault-scorecards.yaml
diff --git a/.github/workflows/sync_contracts.yml b/.github/workflows/sync_contracts.yml
index ab174e38f..e4090ec64 100644
--- a/.github/workflows/sync_contracts.yml
+++ b/.github/workflows/sync_contracts.yml
@@ -1,13 +1,9 @@
-# This workflow uses actions that are not certified by GitHub. They are provided
-# by a third-party and are governed by separate terms of service, privacy
-# policy, and support documentation.
-
 name: Sync Chainloop Workflow contracts
 on:
   push:
-    branches: [ "main" ]
+    branches: ["main"]
     paths:
-      - '.github/workflows/contracts/**'
+      - ".github/workflows/contracts/**"
   schedule:
     - cron: "0 0 * * *" # daily at midnight
 
@@ -16,7 +12,18 @@ permissions: read-all
 
 jobs:
   chainloop_contract_sync:
-    name: Chainloop Contract Sync
-    uses: chainloop-dev/labs/.github/workflows/chainloop_contract_sync.yml@5344787a72876bd22e199b94c09a86532521b4b3
-    secrets:
-      api_token: ${{ secrets.CHAINLOOP_TOKEN }}
+    name: "Chainloop Contract Sync"
+    runs-on: ubuntu-latest
+    env:
+      CHAINLOOP_TOKEN: ${{ secrets.CHAINLOOP_TOKEN }}
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Install Chainloop
+        run: |
+          curl -sfL https://dl.chainloop.dev/cli/install.sh | bash -s
+      - name: Update contract definitions
+        run: |
+          for file in .github/workflows/contracts/*.yaml; do
+            chainloop wf contract apply -f $file
+          done