diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 32e6445..bb24ae2 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -26,7 +26,7 @@ jobs:
       fail-fast: false
       matrix:
         python-version: ["3.8", "3.10"]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - uses: actions/checkout@v4
       with:
@@ -53,7 +53,7 @@ jobs:
       fail-fast: false
       matrix:
         python-version: ["3.8", "3.10"]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
     - uses: actions/checkout@v4
       with:
diff --git a/.gitignore b/.gitignore
index ed63018..042b19d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,25 +1,45 @@
-# Byte-compiled / optimized / DLL files
+# This file is centrally managed as a template file in https://github.com/canonical/solutions-engineering-automation
+# To update the file:
+# - Edit it in the canonical/solutions-engineering-automation repository.
+# - Open a PR with the changes.
+# - When the PR merges, the soleng-terraform bot will open a PR to the target repositories with the changes.
+
+# Python Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]
 *$py.class
 
-# Log files
-*.log
-
-.tox/
+# Test files and directories
+.pytest_cache/
 .coverage
+.tox
+reports/
+**/report/
+htmlcov/
+.mypy_cache
 
-# vi
-.*.swp
+# python virtual environments (for local dev)
+.venv
+venv
+env
 
-# pycharm
-.idea/
+# Build artefacts
+output/
+.build/
+build/
+*.charm
+*.snap
+# python build artefacts
+deb_dist/
+dist/
+*.egg-info/
 
-# version data
-repo-info
+# Log files
+*.log
 
-# reports
-report/*
+# general backup files
+*~
+*.bak
 
-# charm
-*.charm
+# Note: for editor-specific files, please don't add them here, as they are specific to your environment, not the project.
+# Instead, consider using a global gitignore on your workstation.