diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 229ee007..a9755f60 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,6 +22,9 @@ jobs:
         env:
           # renovate: datasource=github-releases depName=j178/prek extractVersion=^v(?<version>.+)$
           PREK_VERSION: 0.5.5
+          # jactionlint's online rules (yo61/global decisions/2026-10-17-retire-zizmor.md).
+          JACTIONLINT_ONLINE: 1
+          GITHUB_TOKEN: ${{ github.token }}
         with:
           prek-version: ${{ env.PREK_VERSION }}