diff --git a/.gitea/workflows/bandit.yml b/.gitea/workflows/bandit.yml
deleted file mode 100644
index e70599d..0000000
--- a/.gitea/workflows/bandit.yml
+++ /dev/null
@@ -1,36 +0,0 @@
----
-name: Bandit
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-# XXX need to do stuff with uv
-jobs:
-  audit-runtime-security:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version:
-          - "3.11"
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: '${{ matrix.python-version }}'
-          cache: 'pip'
-          cache-dependency-path: 'requirements.txt'
-
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install -r requirements.txt
-          pip install -r requirements-dev.txt
-
-      - name: Analyse code with Bandit
-        run: |
-          bandit -x  '**/test_*.py,./.venv/**' -r .
diff --git a/.gitea/workflows/flake8.yml b/.gitea/workflows/flake8.yml
deleted file mode 100644
index 69ec686..0000000
--- a/.gitea/workflows/flake8.yml
+++ /dev/null
@@ -1,35 +0,0 @@
----
-name: Flake8
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-# XXX need to do stuff with uv
-jobs:
-  audit:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version:
-          - "3.11"
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: '${{ matrix.python-version }}'
-          cache: 'pip'
-          cache-dependency-path: 'requirements.txt'
-
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install -r requirements.txt
-          pip install -r requirements-dev.txt
-      - name: Analyse code with Flake8
-        run: |
-          flake8 $(git ls-files '*.py')
diff --git a/.gitea/workflows/pylint.yml b/.gitea/workflows/pylint.yml
deleted file mode 100644
index e43b69c..0000000
--- a/.gitea/workflows/pylint.yml
+++ /dev/null
@@ -1,35 +0,0 @@
----
-name: Pylint
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-
-# XXX need to do stuff with uv
-jobs:
-  audit-runtime-security:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version:
-          - "3.11"
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-
-      - name: Set up Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: '${{ matrix.python-version }}'
-          cache: 'pip'
-          cache-dependency-path: 'requirements.txt'
-
-      - name: Install dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install -r requirements.txt
-          pip install -r requirements-dev.txt
-      - name: Analyse code with Pylint
-        run: |
-          pylint $(git ls-files '*.py')
diff --git a/.gitea/workflows/mypy.yml b/.gitea/workflows/python-lint.yml
similarity index 71%
rename from .gitea/workflows/mypy.yml
rename to .gitea/workflows/python-lint.yml
index 0409561..324a0c7 100644
--- a/.gitea/workflows/mypy.yml
+++ b/.gitea/workflows/python-lint.yml
@@ -1,5 +1,5 @@
 ---
-name: Mypy
+name: Linting
 on:
   push:
     branches: [main]
@@ -8,7 +8,7 @@ on:
 
 # XXX need to do stuff with uv
 jobs:
-  audit-typing:
+  linting:
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -31,6 +31,18 @@ jobs:
           pip install -r requirements.txt
           pip install -r requirements-dev.txt
 
+      - name: Analyse code with Pylint
+        run: |
+          pylint $(git ls-files '*.py')
+
+      - name: Analyse code with Flake8
+        run: |
+          flake8 $(git ls-files '*.py')
+
       - name: Analyse code with Mypy
         run: |
           mypy --install-types --non-interactive $(git ls-files '*.py')
+
+      - name: Analyse code with Bandit
+        run: |
+          bandit -x  '**/test_*.py,./.venv/**' -r .