@@ -20,7 +20,11 @@ runs:
 
     - name: Configure prebuilt ${{ inputs.binary }}
       shell: bash
-      run: |
+      run: | # zizmor: ignore[github-env] validated filename under the trusted workspace path
+        if [[ ! "${INPUTS_BINARY}" =~ ^[a-zA-Z0-9._-]+$ ]]; then
+          echo "invalid driver binary name: ${INPUTS_BINARY}" >&2
+          exit 1
+        fi
         driver="$GITHUB_WORKSPACE/.e2e/prebuilt-driver/${INPUTS_BINARY}"
         chmod +x "$driver"
         "$driver" --version
 
@@ -28,7 +28,7 @@ runs:
 
     - name: Install Podman and build dependencies
       shell: bash
-      run: |
+      run: | # zizmor: ignore[github-env] persists only literal and trusted runner-derived paths
         sudo apt-get update
         sudo apt-get install -y --no-install-recommends \
           apparmor \
@@ -70,7 +70,7 @@ runs:
 
     - name: Configure rootless Podman
       shell: bash
-      run: |
+      run: | # zizmor: ignore[github-env] runtime path is derived solely from the runner UID
         set -euo pipefail
         if ! grep -q "^${USER}:" /etc/subuid; then
           sudo usermod --add-subuids 100000-165535 "$USER"
 
@@ -26,7 +26,7 @@ runs:
       shell: bash
       env:
         MISE_VERSION: ${{ inputs.version }}
-      run: |
+      run: | # zizmor: ignore[github-env] PATH entries are fixed beneath the runner-controlled HOME
         set -euo pipefail
         curl https://mise.run | sh
         export PATH="$HOME/.local/bin:$HOME/.local/share/mise/shims:$PATH"
 
@@ -46,7 +46,7 @@ jobs:
       matrix:
         include: ${{ fromJSON(inputs.suite-matrix) }}
     container:
-      image: ghcr.io/nvidia/openshell/ci:latest
+      image: ghcr.io/nvidia/openshell/ci:37072ee81cd7b294c714bfa5ecc829b6927b3d70
       credentials:
         username: ${{ github.actor }}
         password: ${{ secrets.GITHUB_TOKEN }}