diff --git a/.github/actions/setup-uv-project/action.yml b/.github/actions/setup-uv-project/action.yml
index d32b697c..ae4566b6 100644
--- a/.github/actions/setup-uv-project/action.yml
+++ b/.github/actions/setup-uv-project/action.yml
@@ -11,5 +11,13 @@ runs:
         enable-cache: true
         github-token: ${{ github.token }}
 
+    - name: Cache uv virtual environment
+      uses: actions/cache@v5
+      with:
+        path: .venv
+        key: uv-venv-${{ runner.os }}-${{ matrix.python-version || '3.11' }}-${{ hashFiles('pyproject.toml') }}
+        restore-keys: |
+          uv-venv-${{ runner.os }}-${{ matrix.python-version || '3.11' }}-
+
     - shell: bash
       run: uv sync --extra dev
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 0bd5eaaa..cf3cbdff 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -3,6 +3,7 @@ name: Package Build
 permissions:
   contents: read
   pull-requests: read
+  actions: write
 
 on:
   pull_request:
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index 021c6b66..7070632c 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -3,6 +3,7 @@ name: Algorithm Docs Generation
 permissions:
   contents: read
   pull-requests: read
+  actions: write
 
 on:
   workflow_dispatch:
diff --git a/.github/workflows/installation.yaml b/.github/workflows/installation.yaml
index ddc1dde3..674f7a6d 100644
--- a/.github/workflows/installation.yaml
+++ b/.github/workflows/installation.yaml
@@ -3,6 +3,7 @@ name: Installation Tests
 permissions:
   contents: read
   pull-requests: read
+  actions: write
 
 on:
   workflow_dispatch:
diff --git a/.github/workflows/tests.yaml b/.github/workflows/tests.yaml
index 3432cc22..0d283611 100644
--- a/.github/workflows/tests.yaml
+++ b/.github/workflows/tests.yaml
@@ -3,6 +3,7 @@ name: Code Quality & Tests
 permissions:
   contents: read
   pull-requests: read
+  actions: write
 
 on:
   push:
@@ -63,6 +64,7 @@ jobs:
         run: echo "success=true" >> $GITHUB_OUTPUT
 
   test:
+    needs: linting
     runs-on: pruna-cpu
 
     strategy: