diff --git a/.github/workflows/linting.yaml b/.github/workflows/linting.yaml
index ee396a0..a8c291d 100644
--- a/.github/workflows/linting.yaml
+++ b/.github/workflows/linting.yaml
@@ -80,7 +80,7 @@ jobs:
         - name: Install pinned version of just
           uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0
           with:
-              just-version: ${{ env.JUST_VERSION }}
+              just-version: ${{ env.JUST_VERSION }}  # zizmor: ignore[unpinned-tools] pinned via env.JUST_VERSION
 
         # repo: https://github.com/astral-sh/setup-uv
         # releases: https://github.com/astral-sh/setup-uv/tags
diff --git a/.github/workflows/releasing.yaml b/.github/workflows/releasing.yaml
index 678221e..4496d8f 100644
--- a/.github/workflows/releasing.yaml
+++ b/.github/workflows/releasing.yaml
@@ -93,7 +93,7 @@ jobs:
             - name: Install pinned version of just
               uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0
               with:
-                  just-version: ${{ env.JUST_VERSION }}
+                  just-version: ${{ env.JUST_VERSION }}  # zizmor: ignore[unpinned-tools] pinned via env.JUST_VERSION
 
             - name: Install pinned version of uv
               uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3
diff --git a/.github/workflows/testing.yaml b/.github/workflows/testing.yaml
index f092840..0b643d2 100644
--- a/.github/workflows/testing.yaml
+++ b/.github/workflows/testing.yaml
@@ -94,7 +94,7 @@ jobs:
         - name: Install pinned version of just
           uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0
           with:
-              just-version: ${{ env.JUST_VERSION }}
+              just-version: ${{ env.JUST_VERSION }}  # zizmor: ignore[unpinned-tools] pinned via env.JUST_VERSION
 
         # repo: https://github.com/astral-sh/setup-uv
         # releases: https://github.com/astral-sh/setup-uv/tags