diff --git a/Cargo.toml b/Cargo.toml
index 1ca258c6..45db0427 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -15,10 +15,14 @@ path = "src/main.rs"
 strip = true
 
 [lints.rust]
+unreachable_pub = "warn"
+unsafe_code = "warn"
 unused_crate_dependencies = "warn"
 
 [lints.clippy]
+panic_in_result_fn = "warn"
 pedantic = "warn"
+unwrap_used = "warn"
 
 [dependencies]
 chrono = "0.4"
diff --git a/clippy.toml b/clippy.toml
new file mode 100644
index 00000000..154626ef
--- /dev/null
+++ b/clippy.toml
@@ -0,0 +1 @@
+allow-unwrap-in-tests = true
diff --git a/src/main.rs b/src/main.rs
index afec2ce8..006bdbc1 100644
--- a/src/main.rs
+++ b/src/main.rs
@@ -16,7 +16,7 @@ const UNSPECIFIED_ERROR: i32 = 1;
 
 #[derive(Parser)]
 #[command(bin_name = "actions")]
-pub(crate) enum Cli {
+enum Cli {
     GenerateBuildpackMatrix(GenerateBuildpackMatrixArgs),
     GenerateChangelog(GenerateChangelogArgs),
     PrepareRelease(PrepareReleaseArgs),