diff --git a/.github/workflows/pr-security-scan.yml b/.github/workflows/pr-security-scan.yml
index a56f4f9..39a7e0e 100644
--- a/.github/workflows/pr-security-scan.yml
+++ b/.github/workflows/pr-security-scan.yml
@@ -42,6 +42,10 @@ on:
         description: 'Name of the Dockerfile'
         type: string
         default: 'Dockerfile'
+      enable_docker_scan:
+        description: 'Enable Docker image build and vulnerability scanning. Set to false for projects without Dockerfile (e.g., CLI tools)'
+        type: boolean
+        default: true
 
 permissions:
   id-token: write       # Required for OIDC authentication
@@ -129,6 +133,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
+        if: inputs.enable_docker_scan
         uses: docker/setup-buildx-action@v3
 
       # ----------------- Security Scans -----------------
@@ -156,7 +161,7 @@ jobs:
           skip-dirs: '.git,node_modules,dist,build,.next,coverage,vendor'
 
       - name: Build Docker Image for Scanning
-        if: always()
+        if: always() && inputs.enable_docker_scan
         uses: docker/build-push-action@v6
         with:
           context: ${{ inputs.monorepo_type == 'type2' && matrix.working_dir == inputs.frontend_folder && inputs.frontend_folder || '.' }}
@@ -170,7 +175,7 @@ jobs:
             ${{ secrets.NPMRC_TOKEN && format('npmrc=//npm.pkg.github.com/:_authToken={0}', secrets.NPMRC_TOKEN) || '' }}
 
       - name: Trivy Vulnerability Scan - Docker Image (Table Output)
-        if: always()
+        if: always() && inputs.enable_docker_scan
         uses: aquasecurity/trivy-action@master
         with:
           image-ref: '${{ env.DOCKERHUB_ORG }}/${{ env.APP_NAME }}:pr-scan-${{ github.sha }}'
@@ -181,7 +186,7 @@ jobs:
           exit-code: '0'
 
       - name: Trivy Vulnerability Scan - Docker Image (SARIF Output)
-        if: always()
+        if: always() && inputs.enable_docker_scan
         uses: aquasecurity/trivy-action@0.33.1
         with:
           image-ref: '${{ env.DOCKERHUB_ORG }}/${{ env.APP_NAME }}:pr-scan-${{ github.sha }}'
diff --git a/docs/api-dog-e2e-tests-workflow.md b/docs/api-dog-e2e-tests-workflow.md
index 0851e64..6bec353 100644
--- a/docs/api-dog-e2e-tests-workflow.md
+++ b/docs/api-dog-e2e-tests-workflow.md
@@ -24,10 +24,7 @@ api-tests:
     output_formats: "html,cli"
     node_version: "20"
     runner_type: "firmino-lxc-runners"
-  secrets:
-    test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-    apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-    environment_id: ${{ secrets.APIDOG_ENVIRONMENT_ID }}
+    secrets: inherit
 ```
 
 ### Auto-detect Environment from Tag
@@ -37,11 +34,7 @@ api-tests:
   uses: LerianStudio/github-actions-shared-workflows/.github/workflows/api-dog-e2e-tests.yml@main
   with:
     auto_detect_environment: true
-  secrets:
-    test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-    apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-    dev_environment_id: ${{ secrets.APIDOG_DEV_ENVIRONMENT_ID }}
-    stg_environment_id: ${{ secrets.APIDOG_STG_ENVIRONMENT_ID }}
+    secrets: inherit
 ```
 
 ### Complete Example with GitOps Integration
@@ -74,11 +67,7 @@ jobs:
       auto_detect_environment: true
       test_iterations: "3"
       output_formats: "html,cli,json"
-    secrets:
-      test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-      apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-      dev_environment_id: ${{ secrets.APIDOG_DEV_ENVIRONMENT_ID }}
-      stg_environment_id: ${{ secrets.APIDOG_STG_ENVIRONMENT_ID }}
+    secrets: inherit
 ```
 
 ## Inputs
@@ -244,13 +233,11 @@ with:
 
 **Error**: Environment ID not set
 
-**Solution**: When using `auto_detect_environment: true`, ensure both secrets are provided:
+**Solution**: When using `auto_detect_environment: true`, ensure both environment secrets are configured at the repository or organization level:
+- `APIDOG_DEV_ENVIRONMENT_ID`
+- `APIDOG_STG_ENVIRONMENT_ID`
 
-```yaml
-secrets:
-  dev_environment_id: ${{ secrets.APIDOG_DEV_ENVIRONMENT_ID }}
-  stg_environment_id: ${{ secrets.APIDOG_STG_ENVIRONMENT_ID }}
-```
+Then use `secrets: inherit` in your workflow call.
 
 ### CLI Installation Issues
 
@@ -294,10 +281,7 @@ on:
 jobs:
   api-tests:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/api-dog-e2e-tests.yml@main
-    secrets:
-      test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-      apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-      environment_id: ${{ secrets.APIDOG_ENVIRONMENT_ID }}
+    secrets: inherit
 ```
 
 ### Release Pipeline with E2E
@@ -324,11 +308,7 @@ jobs:
       test_iterations: "3"
       output_formats: "html,cli,json"
       runner_type: "firmino-lxc-runners"
-    secrets:
-      test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-      apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-      dev_environment_id: ${{ secrets.APIDOG_DEV_ENVIRONMENT_ID }}
-      stg_environment_id: ${{ secrets.APIDOG_STG_ENVIRONMENT_ID }}
+    secrets: inherit
 ```
 
 ### Scheduled E2E Tests
@@ -344,19 +324,13 @@ jobs:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/api-dog-e2e-tests.yml@main
     with:
       test_iterations: "2"
-    secrets:
-      test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-      apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-      environment_id: ${{ secrets.APIDOG_DEV_ENVIRONMENT_ID }}
+    secrets: inherit
 
   test_stg:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/api-dog-e2e-tests.yml@main
     with:
       test_iterations: "2"
-    secrets:
-      test_scenario_id: ${{ secrets.APIDOG_TEST_SCENARIO_ID }}
-      apidog_access_token: ${{ secrets.APIDOG_ACCESS_TOKEN }}
-      environment_id: ${{ secrets.APIDOG_STG_ENVIRONMENT_ID }}
+    secrets: inherit
 ```
 
 ## Related Workflows
diff --git a/docs/gitops-update-workflow.md b/docs/gitops-update-workflow.md
index 7ee7c50..092a9e2 100644
--- a/docs/gitops-update-workflow.md
+++ b/docs/gitops-update-workflow.md
@@ -24,16 +24,11 @@ update_gitops:
   uses: LerianStudio/github-actions-shared-workflows/.github/workflows/gitops-update.yml@main
   with:
     yaml_key_mappings: '{"backend.tag": ".auth.image.tag"}'
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
-    argocd_token: ${{ secrets.ARGOCD_GHUSER_TOKEN }}
-    argocd_url: ${{ secrets.ARGOCD_URL }}
-    docker_username: ${{ secrets.DOCKER_USERNAME }}
-    docker_password: ${{ secrets.DOCKER_PASSWORD }}
+  secrets: inherit
 ```
 
+> **Required Secrets**: `MANAGE_TOKEN`, `LERIAN_CI_CD_USER_NAME`, `LERIAN_CI_CD_USER_EMAIL`, `ARGOCD_GHUSER_TOKEN`, `ARGOCD_URL`, `DOCKER_USERNAME`, `DOCKER_PASSWORD`
+
 **Auto-generated values** (for repo `my-backend-service`):
 - App name: `my-backend-service`
 - Artifact pattern: `gitops-tags-my-backend-service-*`
@@ -50,14 +45,7 @@ update_gitops:
   uses: LerianStudio/github-actions-shared-workflows/.github/workflows/gitops-update.yml@main
   with:
     yaml_key_mappings: '{"backend.tag": ".crm.image.tag", "frontend.tag": ".frontend.image.tag"}'
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
-    argocd_token: ${{ secrets.ARGOCD_GHUSER_TOKEN }}
-    argocd_url: ${{ secrets.ARGOCD_URL }}
-    docker_username: ${{ secrets.DOCKER_USERNAME }}
-    docker_password: ${{ secrets.DOCKER_PASSWORD }}
+  secrets: inherit
 ```
 
 ### Dynamic Mapping Example (Multiple Components like Midaz)
@@ -70,14 +58,7 @@ update_gitops:
   with:
     use_dynamic_mapping: true
     yaml_key_mappings: '{"prefix": "midaz-"}'
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
-    argocd_token: ${{ secrets.ARGOCD_GHUSER_TOKEN }}
-    argocd_url: ${{ secrets.ARGOCD_URL }}
-    docker_username: ${{ secrets.DOCKER_USERNAME }}
-    docker_password: ${{ secrets.DOCKER_PASSWORD }}
+  secrets: inherit
 ```
 
 ### Manual Environment Selection
@@ -97,10 +78,7 @@ update_gitops:
       }
     commit_message_prefix: 'my-backend-service'
     enable_argocd_sync: false
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
+  secrets: inherit
 ```
 
 ## Inputs
@@ -282,12 +260,7 @@ update_gitops_backend:
     yaml_key_mappings: '{"backend.tag": ".auth.image.tag"}'
     commit_message_prefix: 'my-backend-service'
     argocd_app_name: 'firmino-my-backend-service'
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
-    argocd_token: ${{ secrets.ARGOCD_GHUSER_TOKEN }}
-    argocd_url: ${{ secrets.ARGOCD_URL }}
+  secrets: inherit
 ```
 
 ### From Multi-Component App
@@ -322,12 +295,7 @@ update_gitops:
     commit_message_prefix: 'my-fullstack-app'
     argocd_app_name: 'firmino-my-fullstack-app'
     runner_type: 'ubuntu-latest'
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
-    argocd_token: ${{ secrets.ARGOCD_GHUSER_TOKEN }}
-    argocd_url: ${{ secrets.ARGOCD_URL }}
+  secrets: inherit
 ```
 
 ### From Monorepo with Dynamic Mapping
@@ -356,12 +324,7 @@ update_gitops:
     yaml_key_mappings: '{"prefix": "myapp-"}'
     commit_message_prefix: 'my-platform'
     argocd_app_name: 'firmino-my-platform'
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
-    argocd_token: ${{ secrets.ARGOCD_GHUSER_TOKEN }}
-    argocd_url: ${{ secrets.ARGOCD_URL }}
+  secrets: inherit
 ```
 
 ## Troubleshooting
diff --git a/docs/go-pr-analysis-workflow.md b/docs/go-pr-analysis-workflow.md
index ed6f461..c0964c7 100644
--- a/docs/go-pr-analysis-workflow.md
+++ b/docs/go-pr-analysis-workflow.md
@@ -72,8 +72,7 @@ jobs:
       enable_tests: true
       enable_coverage: true
       enable_build: true
-    secrets:
-      manage_token: ${{ secrets.GITHUB_TOKEN }}
+    secrets: inherit
 ```
 
 ### Minimal (Only Tests and Lint)
diff --git a/docs/go-release-workflow.md b/docs/go-release-workflow.md
index 07aa88c..4ca0691 100644
--- a/docs/go-release-workflow.md
+++ b/docs/go-release-workflow.md
@@ -45,11 +45,11 @@ jobs:
       enable_docker: true
       docker_registry: 'ghcr.io'
       docker_platforms: 'linux/amd64,linux/arm64'
-    secrets:
-      docker_username: ${{ secrets.DOCKER_USERNAME }}
-      docker_password: ${{ secrets.DOCKER_PASSWORD }}
+    secrets: inherit
 ```
 
+> **Note**: Requires `DOCKER_USERNAME` and `DOCKER_PASSWORD` secrets in repository.
+
 ### With Homebrew Formula
 
 ```yaml
@@ -65,10 +65,11 @@ jobs:
     with:
       enable_homebrew: true
       homebrew_tap_repo: 'myorg/homebrew-tap'
-    secrets:
-      tap_github_token: ${{ secrets.TAP_GITHUB_TOKEN }}
+    secrets: inherit
 ```
 
+> **Note**: Requires `TAP_GITHUB_TOKEN` secret with write access to tap repository.
+
 ### Full Configuration
 
 ```yaml
@@ -92,10 +93,7 @@ jobs:
       enable_homebrew: true
       homebrew_tap_repo: 'myorg/homebrew-tap'
       enable_notifications: true
-    secrets:
-      tap_github_token: ${{ secrets.TAP_GITHUB_TOKEN }}
-      docker_username: ${{ secrets.DOCKER_USERNAME }}
-      docker_password: ${{ secrets.DOCKER_PASSWORD }}
+    secrets: inherit
 ```
 
 ## Inputs
@@ -159,10 +157,11 @@ jobs:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/go-release.yml@main
     with:
       goreleaser_distribution: 'goreleaser-pro'
-    secrets:
-      goreleaser_key: ${{ secrets.GORELEASER_KEY }}
+    secrets: inherit
 ```
 
+> **Note**: Requires `GORELEASER_KEY` secret with your GoReleaser Pro license.
+
 ### Skip Tests (Fast Release)
 
 ```yaml
diff --git a/docs/pr-security-scan-workflow.md b/docs/pr-security-scan-workflow.md
index c61c613..24226b0 100644
--- a/docs/pr-security-scan-workflow.md
+++ b/docs/pr-security-scan-workflow.md
@@ -5,7 +5,8 @@ Reusable workflow for comprehensive security scanning on pull requests. Supports
 ## Features
 
 - **Secret scanning**: Trivy filesystem scan for exposed secrets (scans only changed component folder)
-- **Vulnerability scanning**: Docker image vulnerability detection
+- **Vulnerability scanning**: Docker image vulnerability detection (optional)
+- **CLI/Non-Docker support**: Skip Docker scanning for projects without Dockerfile via `enable_docker_scan: false`
 - **Monorepo support**: Automatic detection of changed components
 - **Component-scoped scanning**: Only scans the specific component folder that changed, not entire repo
 - **Multiple architectures**: Type 1 and Type 2 monorepo patterns
@@ -58,12 +59,9 @@ jobs:
   security-scan:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
     with:
-      runner_type: "firmino-lxc-runners"
+      runner_type: "blacksmith-4vcpu-ubuntu-2404"
       dockerhub_org: "lerianstudio"
-    secrets:
-      manage_token: ${{ secrets.MANAGE_TOKEN }}
-      docker_username: ${{ secrets.DOCKER_USERNAME }}
-      docker_password: ${{ secrets.DOCKER_PASSWORD }}
+    secrets: inherit
 ```
 
 ### Monorepo Type 1
@@ -78,17 +76,14 @@ jobs:
   security-scan:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
     with:
-      runner_type: "firmino-lxc-runners"
+      runner_type: "blacksmith-4vcpu-ubuntu-2404"
       filter_paths: |-
         components/onboarding
         components/transaction
         components/console
       path_level: "2"
       dockerhub_org: "lerianstudio"
-    secrets:
-      manage_token: ${{ secrets.MANAGE_TOKEN }}
-      docker_username: ${{ secrets.DOCKER_USERNAME }}
-      docker_password: ${{ secrets.DOCKER_PASSWORD }}
+    secrets: inherit
 ```
 
 ### Monorepo Type 2
@@ -103,7 +98,7 @@ jobs:
   security-scan:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
     with:
-      runner_type: "firmino-lxc-runners"
+      runner_type: "blacksmith-4vcpu-ubuntu-2404"
       filter_paths: |-
         frontend
         cmd
@@ -115,23 +110,46 @@ jobs:
       monorepo_type: "type2"
       frontend_folder: "frontend"
       dockerhub_org: "lerianstudio"
-    secrets:
-      manage_token: ${{ secrets.MANAGE_TOKEN }}
-      docker_username: ${{ secrets.DOCKER_USERNAME }}
-      docker_password: ${{ secrets.DOCKER_PASSWORD }}
+    secrets: inherit
 ```
 
+### CLI / Non-Docker Projects
+
+For projects without a Dockerfile (e.g., CLI tools), disable Docker scanning to only run filesystem secret scanning:
+
+```yaml
+name: PR Security Scan
+on:
+  pull_request:
+    branches: [develop, release-candidate, main]
+
+jobs:
+  security-scan:
+    uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
+    with:
+      runner_type: "blacksmith-4vcpu-ubuntu-2404"
+      enable_docker_scan: false
+    secrets: inherit
+```
+
+This will:
+- ✅ Run Trivy filesystem secret scanning
+- ❌ Skip Docker image build
+- ❌ Skip Docker vulnerability scanning
+
 ## Inputs
 
 | Input | Type | Default | Description |
 |-------|------|---------|-------------|
-| `runner_type` | string | `firmino-lxc-runners` | GitHub runner type |
+| `runner_type` | string | `blacksmith-4vcpu-ubuntu-2404` | GitHub runner type |
 | `filter_paths` | string | - | Paths to monitor (newline separated). If empty, treats as single app |
 | `path_level` | string | `2` | Directory depth level to extract app name (monorepo only) |
 | `monorepo_type` | string | `type1` | Monorepo type: `type1` or `type2` |
 | `frontend_folder` | string | `frontend` | Frontend folder name for type2 monorepos |
 | `dockerhub_org` | string | `lerianstudio` | DockerHub organization name |
 | `docker_registry` | string | `docker.io` | Docker registry URL |
+| `dockerfile_name` | string | `Dockerfile` | Name of the Dockerfile |
+| `enable_docker_scan` | boolean | `true` | Enable Docker image build and vulnerability scanning. Set to `false` for projects without Dockerfile (e.g., CLI tools) |
 
 ## Secrets
 
@@ -170,14 +188,16 @@ permissions:
 
 For each component in the matrix:
 
-1. **Docker Login**: Authenticate to registry
+1. **Docker Login**: Authenticate to registry (avoids rate limits)
 2. **Checkout Repository**: Clone the code
-3. **Setup Docker Buildx**: Enable multi-platform builds
+3. **Setup Docker Buildx**: Enable multi-platform builds *(skipped if `enable_docker_scan: false`)*
 4. **Trivy Secret Scan (Table)**: Scan filesystem for secrets - **fails on detection**
 5. **Trivy Secret Scan (SARIF)**: Generate SARIF report
-6. **Build Docker Image**: Build image for vulnerability scanning
-7. **Trivy Vulnerability Scan (Table)**: Scan image for vulnerabilities
-8. **Trivy Vulnerability Scan (SARIF)**: Generate SARIF report
+6. **Build Docker Image**: Build image for vulnerability scanning *(skipped if `enable_docker_scan: false`)*
+7. **Trivy Vulnerability Scan (Table)**: Scan image for vulnerabilities *(skipped if `enable_docker_scan: false`)*
+8. **Trivy Vulnerability Scan (SARIF)**: Generate SARIF report *(skipped if `enable_docker_scan: false`)*
+
+> **Note**: When `enable_docker_scan: false`, only filesystem secret scanning runs. This is useful for CLI tools and projects without Dockerfiles.
 
 ## Security Scans
 
@@ -248,21 +268,20 @@ on:
     branches: [develop, release-candidate, main]
 ```
 
-### 2. Use Self-hosted Runners for Better Performance
+### 2. Use Blacksmith Runners for Better Performance
 
 ```yaml
 with:
-  runner_type: "firmino-lxc-runners"
+  runner_type: "blacksmith-4vcpu-ubuntu-2404"
 ```
 
-### 3. Provide GitHub Token for Private Dependencies
+### 3. Use secrets: inherit for Simplicity
 
 ```yaml
-secrets:
-  manage_token: ${{ secrets.MANAGE_TOKEN }}
+secrets: inherit
 ```
 
-Required when Dockerfile needs access to private repositories.
+This passes all repository secrets to the workflow automatically.
 
 ### 4. Configure Path Level Correctly
 
@@ -344,17 +363,18 @@ security-scan:
   with:
     dockerhub_org: "mycompany"
     docker_registry: "ghcr.io"
-  secrets:
-    docker_username: ${{ github.actor }}
-    docker_password: ${{ secrets.GITHUB_TOKEN }}
+  secrets: inherit
 ```
 
+> **Note**: For GitHub Container Registry (ghcr.io), ensure `DOCKER_USERNAME` and `DOCKER_PASSWORD` secrets are configured appropriately.
+
 ### Monorepo Type 1 with Multiple Components
 
 ```yaml
 security-scan:
   uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
   with:
+    runner_type: "blacksmith-4vcpu-ubuntu-2404"
     filter_paths: |-
       services/auth
       services/payment
@@ -362,10 +382,7 @@ security-scan:
       services/user
     path_level: "2"
     monorepo_type: "type1"
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    docker_username: ${{ secrets.DOCKER_USERNAME }}
-    docker_password: ${{ secrets.DOCKER_PASSWORD }}
+  secrets: inherit
 ```
 
 ### Monorepo Type 2 with Custom Frontend Folder
@@ -374,6 +391,7 @@ security-scan:
 security-scan:
   uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
   with:
+    runner_type: "blacksmith-4vcpu-ubuntu-2404"
     filter_paths: |-
       web
       api
@@ -383,10 +401,7 @@ security-scan:
     path_level: "1"
     monorepo_type: "type2"
     frontend_folder: "web"
-  secrets:
-    manage_token: ${{ secrets.MANAGE_TOKEN }}
-    docker_username: ${{ secrets.DOCKER_USERNAME }}
-    docker_password: ${{ secrets.DOCKER_PASSWORD }}
+  secrets: inherit
 ```
 
 ### Complete PR Workflow
@@ -421,15 +436,12 @@ jobs:
   security-scan:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/pr-security-scan.yml@main
     with:
-      runner_type: "firmino-lxc-runners"
+      runner_type: "blacksmith-4vcpu-ubuntu-2404"
       filter_paths: |-
         components/onboarding
         components/transaction
       path_level: "2"
-    secrets:
-      manage_token: ${{ secrets.MANAGE_TOKEN }}
-      docker_username: ${{ secrets.DOCKER_USERNAME }}
-      docker_password: ${{ secrets.DOCKER_PASSWORD }}
+    secrets: inherit
 ```
 
 ## Scan Results
diff --git a/docs/pr-validation-workflow.md b/docs/pr-validation-workflow.md
index 978af90..7de8e00 100644
--- a/docs/pr-validation-workflow.md
+++ b/docs/pr-validation-workflow.md
@@ -72,8 +72,7 @@ jobs:
       min_description_length: 100
       check_changelog: true
       enable_auto_labeler: true
-    secrets:
-      github_token: ${{ secrets.GITHUB_TOKEN }}
+    secrets: inherit
 ```
 
 ### With Custom Scopes
diff --git a/docs/release-workflow.md b/docs/release-workflow.md
index 8e2fac6..13750d5 100644
--- a/docs/release-workflow.md
+++ b/docs/release-workflow.md
@@ -27,30 +27,20 @@ on:
 jobs:
   release:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/release.yml@main
-    secrets:
-      lerian_studio_push_bot_app_id: ${{ secrets.GITHUB_APP_ID }}
-      lerian_studio_push_bot_private_key: ${{ secrets.GITHUB_APP_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key: ${{ secrets.GPG_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key_password: ${{ secrets.GPG_KEY_PASSWORD }}
-      lerian_ci_cd_user_name: ${{ secrets.CI_USER_NAME }}
-      lerian_ci_cd_user_email: ${{ secrets.CI_USER_EMAIL }}
+    secrets: inherit
 ```
 
+> **Required Secrets**: `LERIAN_STUDIO_MIDAZ_PUSH_BOT_APP_ID`, `LERIAN_STUDIO_MIDAZ_PUSH_BOT_PRIVATE_KEY`, `LERIAN_CI_CD_USER_GPG_KEY`, `LERIAN_CI_CD_USER_GPG_KEY_PASSWORD`, `LERIAN_CI_CD_USER_NAME`, `LERIAN_CI_CD_USER_EMAIL`
+
 ### With Custom Runner
 
 ```yaml
 release:
   uses: LerianStudio/github-actions-shared-workflows/.github/workflows/release.yml@main
   with:
-    runner_type: "firmino-lxc-runners"
+    runner_type: "blacksmith-4vcpu-ubuntu-2404"
     semantic_version: "23.0.8"
-  secrets:
-    lerian_studio_push_bot_app_id: ${{ secrets.LERIAN_STUDIO_MIDAZ_PUSH_BOT_APP_ID }}
-    lerian_studio_push_bot_private_key: ${{ secrets.LERIAN_STUDIO_MIDAZ_PUSH_BOT_PRIVATE_KEY }}
-    lerian_ci_cd_user_gpg_key: ${{ secrets.LERIAN_CI_CD_USER_GPG_KEY }}
-    lerian_ci_cd_user_gpg_key_password: ${{ secrets.LERIAN_CI_CD_USER_GPG_KEY_PASSWORD }}
-    lerian_ci_cd_user_name: ${{ secrets.LERIAN_CI_CD_USER_NAME }}
-    lerian_ci_cd_user_email: ${{ secrets.LERIAN_CI_CD_USER_EMAIL }}
+  secrets: inherit
 ```
 
 ### Complete Release Pipeline
@@ -84,13 +74,7 @@ jobs:
   release:
     needs: tests
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/release.yml@main
-    secrets:
-      lerian_studio_push_bot_app_id: ${{ secrets.GITHUB_APP_ID }}
-      lerian_studio_push_bot_private_key: ${{ secrets.GITHUB_APP_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key: ${{ secrets.GPG_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key_password: ${{ secrets.GPG_KEY_PASSWORD }}
-      lerian_ci_cd_user_name: ${{ secrets.CI_USER_NAME }}
-      lerian_ci_cd_user_email: ${{ secrets.CI_USER_EMAIL }}
+    secrets: inherit
 ```
 
 ## Inputs
@@ -416,13 +400,7 @@ on:
 jobs:
   release:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/release.yml@main
-    secrets:
-      lerian_studio_push_bot_app_id: ${{ secrets.APP_ID }}
-      lerian_studio_push_bot_private_key: ${{ secrets.APP_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key: ${{ secrets.GPG_KEY }}
-      lerian_ci_cd_user_gpg_key_password: ${{ secrets.GPG_PASSWORD }}
-      lerian_ci_cd_user_name: ${{ secrets.USER_NAME }}
-      lerian_ci_cd_user_email: ${{ secrets.USER_EMAIL }}
+    secrets: inherit
 ```
 
 ### Release with Build Pipeline
@@ -443,13 +421,7 @@ jobs:
   release:
     needs: test
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/release.yml@main
-    secrets:
-      lerian_studio_push_bot_app_id: ${{ secrets.APP_ID }}
-      lerian_studio_push_bot_private_key: ${{ secrets.APP_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key: ${{ secrets.GPG_KEY }}
-      lerian_ci_cd_user_gpg_key_password: ${{ secrets.GPG_PASSWORD }}
-      lerian_ci_cd_user_name: ${{ secrets.USER_NAME }}
-      lerian_ci_cd_user_email: ${{ secrets.USER_EMAIL }}
+    secrets: inherit
 
   build:
     needs: release
@@ -472,13 +444,7 @@ on:
 jobs:
   release:
     uses: LerianStudio/github-actions-shared-workflows/.github/workflows/release.yml@main
-    secrets:
-      lerian_studio_push_bot_app_id: ${{ secrets.APP_ID }}
-      lerian_studio_push_bot_private_key: ${{ secrets.APP_PRIVATE_KEY }}
-      lerian_ci_cd_user_gpg_key: ${{ secrets.GPG_KEY }}
-      lerian_ci_cd_user_gpg_key_password: ${{ secrets.GPG_PASSWORD }}
-      lerian_ci_cd_user_name: ${{ secrets.USER_NAME }}
-      lerian_ci_cd_user_email: ${{ secrets.USER_EMAIL }}
+    secrets: inherit
 ```
 
 ## Semantic Release Plugins
diff --git a/docs/slack-notify-workflow.md b/docs/slack-notify-workflow.md
index a0e91f6..0d15ef5 100644
--- a/docs/slack-notify-workflow.md
+++ b/docs/slack-notify-workflow.md
@@ -29,8 +29,7 @@ jobs:
     with:
       status: ${{ needs.build.result }}
       workflow_name: "Build Pipeline"
-    secrets:
-      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+    secrets: inherit
 ```
 
 ### With Failed Jobs Information
@@ -55,8 +54,7 @@ jobs:
       status: ${{ needs.lint.result == 'failure' && 'failure' || needs.test.result }}
       workflow_name: "CI Pipeline"
       failed_jobs: ${{ needs.lint.result == 'failure' && 'Lint' || '' }}${{ needs.test.result == 'failure' && ', Test' || '' }}
-    secrets:
-      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+    secrets: inherit
 ```
 
 ### With Custom Message
@@ -68,8 +66,7 @@ notify:
     status: "success"
     workflow_name: "Release"
     custom_message: "Version v1.2.3 has been released! 🎉"
-  secrets:
-    SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+    secrets: inherit
 ```
 
 ### Using secrets: inherit