diff --git a/.github/workflows/frontend-pr.yml b/.github/workflows/frontend-pr.yml
index a186c22e..c103c8e6 100644
--- a/.github/workflows/frontend-pr.yml
+++ b/.github/workflows/frontend-pr.yml
@@ -1,24 +1,8 @@
-name: 'Frontend: PR'
+name: "Frontend: PR"
 
 on:
   pull_request:
-    types: [opened, synchronize, reopened, labeled]
-    branches: ['*']
 
 jobs:
   check:
-    name: Check
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: valitydev/action-setup-thrift@v1
-      - uses: valitydev/action-frontend/setup-install@v2
-        with:
-          npm-not-ci: 'true'
-      - name: Codegen
-        run: npm run codegen
-      - uses: valitydev/action-frontend/publish@v2
-        with:
-          npm-token: ${{ secrets.NPM_TOKEN }}
-          npm-version-tag: 'pr'
-          pr-only-labeled: 'true'
+    uses: valitydev/action-frontend/.github/workflows/proto-check.yml@v3
diff --git a/.github/workflows/frontend-publish.yml b/.github/workflows/frontend-publish.yml
index 746e691f..5c1c6842 100644
--- a/.github/workflows/frontend-publish.yml
+++ b/.github/workflows/frontend-publish.yml
@@ -1,21 +1,13 @@
-name: 'Frontend: Publish'
+name: "Frontend: Publish"
 
 on:
   push:
-    branches: ['master', 'main']
+    branches: ["master", "main"]
+
+permissions:
+  contents: read
+  id-token: write
 
 jobs:
   publish:
-    name: Publish
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - uses: valitydev/action-setup-thrift@v1
-      - uses: valitydev/action-frontend/setup-install@v2
-        with:
-          npm-not-ci: true
-      - name: Build
-        run: npm run codegen
-      - uses: valitydev/action-frontend/publish@v2
-        with:
-          npm-token: ${{ secrets.NPM_TOKEN }}
+    uses: valitydev/action-frontend/.github/workflows/proto-publish.yml@v3