diff --git a/.github/workflows/check-version.yml b/.github/workflows/check-version.yml
index 51042c6..029e882 100644
--- a/.github/workflows/check-version.yml
+++ b/.github/workflows/check-version.yml
@@ -4,6 +4,9 @@ on:
   pull_request:
     branches:
       - main
+    paths:
+      - 'sync-ssh-keys.sh'
+      - 'users.conf'
 
 jobs:
   check-version:
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
new file mode 100644
index 0000000..a67733b
--- /dev/null
+++ b/.github/workflows/lint.yml
@@ -0,0 +1,22 @@
+name: Lint Shell Script
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'sync-ssh-keys.sh'
+      - '.github/workflows/lint.yml'
+
+jobs:
+  shellcheck:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Run ShellCheck
+        uses: ludeeus/action-shellcheck@master
+        with:
+          scandir: .
+          severity: warning
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 32a0d24..610d9e7 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -4,6 +4,10 @@ on:
   push:
     branches:
       - main
+    paths:
+      - 'sync-ssh-keys.sh'
+      - 'users.conf'
+  workflow_dispatch:
 
 jobs:
   release:
diff --git a/sync-ssh-keys.sh b/sync-ssh-keys.sh
index b3e371e..9d1f27a 100644
--- a/sync-ssh-keys.sh
+++ b/sync-ssh-keys.sh
@@ -1,7 +1,8 @@
 #!/bin/bash
 set -euo pipefail
 
-SCRIPT_VERSION="0.0.4"
+# shellcheck disable=SC2034  # planned to be used in a future release
+SCRIPT_VERSION="0.0.5"
 
 # === Load user configuration ===
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"