diff --git a/.github/actions/pr-sanity-checks/action.yaml b/.github/actions/pr-sanity-checks/action.yaml
index 3114f8a94..d9f74b79d 100644
--- a/.github/actions/pr-sanity-checks/action.yaml
+++ b/.github/actions/pr-sanity-checks/action.yaml
@@ -23,8 +23,11 @@ runs:
       # https://github.com/rhysd/actionlint/blob/main/docs/usage.md#use-actionlint-on-github-actions
     - name: Check workflow files
       shell: bash
+      env:
+        ACTIONLINT_VSN: 1.6.25
       run: |
-        bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)
+        wget https://github.com/rhysd/actionlint/releases/download/v${ACTIONLINT_VSN}/actionlint_${ACTIONLINT_VSN}_linux_amd64.tar.gz
+        tar xfz actionlint_${ACTIONLINT_VSN}_linux_amd64.tar.gz
         # TODO: enable shellcheck when all the current issues are fixed
         ./actionlint -color \
           -shellcheck= \
diff --git a/scripts/pr-sanity-checks.sh b/scripts/pr-sanity-checks.sh
index c4d255941..113ffd324 100755
--- a/scripts/pr-sanity-checks.sh
+++ b/scripts/pr-sanity-checks.sh
@@ -29,4 +29,5 @@ docker run --rm -it -v "$(pwd):/emqx" -w /emqx \
        -e GITHUB_BASE_REF="$BEFORE_REF" \
        -e MIX_ENV=emqx-enterprise \
        -e PROFILE=emqx-enterprise \
-       "${EMQX_BUILDER}" /bin/bash -c "${commands}"
+       -e ACTIONLINT_VSN=1.6.25 \
+       "${EMQX_BUILDER}" /bin/bash -c "git config --global --add safe.directory /emqx; ${commands}"