diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 74c2879d315f..b1700f2ded12 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -63,16 +63,19 @@ jobs:
       with:
         ruby-version: "${{ matrix.ruby }}"
     - name: Install NodeJS 18.x
-      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       with:
         node-version: "18.x || 24.x"
     - name: Install tools
       # zizmor: ignore[template-injection]
       run: "gem install --no-document toys && npm install linkinator"
     - name: Test ${{ matrix.task }}
-      # zizmor: ignore[template-injection]
+      env:
+        GITHUB_EVENT_NAME: ${{ github.event_name }}
+        GITHUB_EVENT_PATH: ${{ github.event_path }}
+        GITHUB_EVENT_INPUTS_FLAGS: ${{ github.event.inputs.flags }}
       run: |
-        toys ci -v ${{ matrix.task }} --github-event-name=${{ github.event_name }} --github-event-payload=${{ github.event_path }} ${{ github.event.inputs.flags }}
+        toys ci -v ${{ matrix.task }} --github-event-name=${GITHUB_EVENT_NAME} --github-event-payload=${GITHUB_EVENT_PATH} ${GITHUB_EVENT_INPUTS_FLAGS}
     - name: Open Issues
       if: ${{ failure() }}
       env: