diff --git a/.github/actions/slack-alert/action.yml b/.github/actions/slack-alert/action.yml
index f73f51a9fa..462c38c7b9 100644
--- a/.github/actions/slack-alert/action.yml
+++ b/.github/actions/slack-alert/action.yml
@@ -17,7 +17,6 @@ runs:
       if: >-
         ${{
           failure() &&
-          env.FREEZE != 'true' &&
           github.repository == 'github/docs-internal' &&
           github.event_name != 'pull_request' &&
           github.event_name != 'pull_request_target'
diff --git a/.github/workflows/content-changes-table-comment.yml b/.github/workflows/content-changes-table-comment.yml
index 8951a48ce7..9f4d5bed37 100644
--- a/.github/workflows/content-changes-table-comment.yml
+++ b/.github/workflows/content-changes-table-comment.yml
@@ -25,6 +25,9 @@ jobs:
     outputs:
       filterContentDir: ${{ steps.filter.outputs.filterContentDir }}
     steps:
+      - name: Check out repo
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
       - name: Get files changed
         uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50
         id: filter
diff --git a/.github/workflows/purge-old-deployment-environments.yml b/.github/workflows/purge-old-deployment-environments.yml
index 90c4e26ba9..3736f32498 100644
--- a/.github/workflows/purge-old-deployment-environments.yml
+++ b/.github/workflows/purge-old-deployment-environments.yml
@@ -15,6 +15,15 @@ on:
 permissions:
   contents: write
 
+# **IMPORTANT:** Do not change the FREEZE environment variable set here!
+# This workflow runs on a recurring basis. To temporarily disable it (e.g.,
+# during a docs deployment freeze), add an Actions Secret to the repo settings
+# called `FREEZE` with a value of `true`. To re-enable Audit Logs updates, simply
+# delete that Secret from the repo settings. The environment variable here
+# will duplicate that Secret's value for later evaluation.
+env:
+  FREEZE: ${{ secrets.FREEZE }}
+
 jobs:
   purge-old-deployment-environments:
     if: ${{ github.repository == 'github/docs-internal' || github.repository == 'github/docs' }}
diff --git a/.github/workflows/purge-old-workflow-runs.yml b/.github/workflows/purge-old-workflow-runs.yml
index 1341b3557e..209b55a6be 100644
--- a/.github/workflows/purge-old-workflow-runs.yml
+++ b/.github/workflows/purge-old-workflow-runs.yml
@@ -12,6 +12,15 @@ on:
 permissions:
   contents: write
 
+# **IMPORTANT:** Do not change the FREEZE environment variable set here!
+# This workflow runs on a recurring basis. To temporarily disable it (e.g.,
+# during a docs deployment freeze), add an Actions Secret to the repo settings
+# called `FREEZE` with a value of `true`. To re-enable Audit Logs updates, simply
+# delete that Secret from the repo settings. The environment variable here
+# will duplicate that Secret's value for later evaluation.
+env:
+  FREEZE: ${{ secrets.FREEZE }}
+
 jobs:
   purge-old-workflow-runs:
     if: ${{ github.repository == 'github/docs-internal' || github.repository == 'github/docs' }}
diff --git a/.github/workflows/repo-freeze-check.yml b/.github/workflows/repo-freeze-check.yml
index 7e5cf02293..7b8b6271c5 100644
--- a/.github/workflows/repo-freeze-check.yml
+++ b/.github/workflows/repo-freeze-check.yml
@@ -29,6 +29,9 @@ jobs:
     name: Prevent merging during deployment freezes
     runs-on: ubuntu-latest
     steps:
+      - name: Check out repo
+        uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0
+
       - name: Fail if repo merges are paused
         if: ${{ env.FREEZE == 'true' && github.head_ref != 'repo-sync' }}
         run: |
diff --git a/.github/workflows/sync-search-elasticsearch.yml b/.github/workflows/sync-search-elasticsearch.yml
index e77d424965..c02c5cb7a4 100644
--- a/.github/workflows/sync-search-elasticsearch.yml
+++ b/.github/workflows/sync-search-elasticsearch.yml
@@ -34,7 +34,7 @@ concurrency:
 env:
   FREEZE: ${{ secrets.FREEZE }}
   ELASTICSEARCH_URL: ${{ secrets.ELASTICSEARCH_URL }}
-  # Since we'll run in NDOE_ENV=production, we need to be explicit that
+  # Since we'll run in NODE_ENV=production, we need to be explicit that
   # we don't want Hydro configured.
   HYDRO_ENDPOINT: ''
   HYDRO_SECRET: ''