diff --git a/.bazelrc b/.bazelrc
new file mode 100644
index 0000000..292b22d
--- /dev/null
+++ b/.bazelrc
@@ -0,0 +1,6 @@
+build --incompatible_disallow_empty_glob
+build --apple_platform_type=macos
+build --incompatible_strict_action_env
+build --macos_minimum_os=13.0
+test --test_output=errors
+test --test_summary=detailed
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2b2e015..b8a8ab1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -9,13 +9,13 @@ on:
 jobs:
   tests:
     name: Run tests
-    runs-on: macos-latest
+    runs-on: macos-13
     steps:
       - uses: actions/checkout@v3
-      - run: bazelisk test //Tests/...
+      - run: bazelisk test //Tests/... --xcode_version=14.3
   executable:
     name: Build macos_command_line_application
-    runs-on: macos-latest
+    runs-on: macos-13
     steps:
       - uses: actions/checkout@v3
       - run: bazelisk build //Sources/SignHereTool:sign-here -c opt --macos_cpus=x86_64,arm64
diff --git a/README.md b/README.md
index 8d123e6..5a32004 100644
--- a/README.md
+++ b/README.md
@@ -162,7 +162,7 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 http_archive(
     name = "com_github_tinder_sign_here",
-    url = "URL",
+    url = "https://github.com/Tinder/sign-here",
     sha256 = "FIX_ME",
 )
 
diff --git a/Sources/SignHereTool/BUILD b/Sources/SignHereTool/BUILD
index ce1147e..b6564e6 100644
--- a/Sources/SignHereTool/BUILD
+++ b/Sources/SignHereTool/BUILD
@@ -22,7 +22,7 @@ swift_binary(
 
 macos_command_line_application(
     name = "sign-here-macos",
-    minimum_os_version = "12.0.0",
+    minimum_os_version = "13.0.0",
     deps = [
         ":sign-here",
     ],