diff --git a/.forgejo/workflows/check.yml b/.forgejo/workflows/check.yml
index 85fa77a..66e66a8 100644
--- a/.forgejo/workflows/check.yml
+++ b/.forgejo/workflows/check.yml
@@ -14,14 +14,6 @@ jobs:
           nix --version
           # shellcheck disable=SC2016
           nix build --print-build-logs '.#checks.x86_64-linux.${{ matrix.check }}'
-  check-renovaterc:
-    runs-on: nixos
-    steps:
-      - uses: "https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4
-      - name: Validate renovaterc.json
-        run: |
-          nix --version
-          nix shell nixpkgs#renovate --command renovate-config-validator
   report-size:
     runs-on: nixos
     needs: check
@@ -35,13 +27,14 @@ jobs:
           comment-on-pr: ${{ github.ref_name != 'main' }}
           # Generate artifacts on main (to speed up comparisons)
           # generate-artifact: ${{ github.ref_name == 'main' }}
-          # For testing always generate artifacts
+          # Always generate artifacts for testing purposes
           generate-artifact: 'true'
-          github-token: ${{ secrets.ARTIFACT_TOKEN }}
           # Generate comparisons to main
           do-comparison: 'true'
           # This job's name (so we can find the artifacts)
           job-name: report-size
+          # A token is required to download a previous run's artifact
+          github-token: ${{ secrets.FULL_PERM_TEST }}
   report-download-check:
     runs-on: nixos
     needs: report-size
diff --git a/.forgejo/workflows/renovate.yml b/.forgejo/workflows/renovate.yml
new file mode 100644
index 0000000..204e98e
--- /dev/null
+++ b/.forgejo/workflows/renovate.yml
@@ -0,0 +1,14 @@
+on:
+  push:
+    paths:
+      # only run if the renovate config changed
+      - renovate.json
+jobs:
+  check-renovaterc:
+    runs-on: nixos
+    steps:
+      - uses: "https://git.salame.cl/actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683" # v4
+      - name: Validate renovaterc.json
+        run: |
+          nix --version
+          nix shell nixpkgs#renovate --command renovate-config-validator
diff --git a/action.yml b/action.yml
index 06e7a24..38ce031 100644
--- a/action.yml
+++ b/action.yml
@@ -144,14 +144,14 @@ runs:
 
         echo "run-id=$run_id" >> "$GITHUB_OUTPUT"
         log Would try to download "$ARTIFACT_NAME" from "$run_id"
-    # - name: Download previous report
-    #   uses: https://git.salame.cl/actions/download-artifact@d8d0a99033603453ad2255e58720b460a0555e1e # v4
-    #   # Ensure the previous step succeeded
-    #   if: steps.previous-report.outcome == 'success'
-    #   with:
-    #     name: ${{ inputs.artifact-name }}
-    #     github-token: ${{ inputs.github-token }}
-    #     run-id: ${{ steps.previous-report.outputs.run-id }}
+    - name: Download previous report
+      uses: https://git.salame.cl/actions/download-artifact@d8d0a99033603453ad2255e58720b460a0555e1e # v4
+      # Ensure the previous step succeeded
+      if: steps.previous-report.outcome == 'success'
+      with:
+        name: ${{ inputs.artifact-name }}
+        github-token: ${{ inputs.github-token }}
+        run-id: ${{ steps.previous-report.outputs.run-id }}
     - name: Create report
       if: inputs.comment-on-pr == 'true' || inputs.generate-artifact == 'true'
       env: