diff --git a/.github/workflows/ci_cross_repo_integration.yml b/.github/workflows/ci_cross_repo_integration.yml
index 3ba89497b..6583fd12b 100644
--- a/.github/workflows/ci_cross_repo_integration.yml
+++ b/.github/workflows/ci_cross_repo_integration.yml
@@ -61,11 +61,18 @@ jobs:
             - name: Enable Go toolchain auto-download
               run: echo "GOTOOLCHAIN=auto" >> "$GITHUB_ENV"
 
+            # Workaround: v1.2.3 writes unexpanded $HOME to GITHUB_PATH
+            # when using the default install-dir. Use an absolute path
+            # until upstream fix lands (carabiner-dev/actions).
             - name: Install snappy
-              uses: carabiner-dev/actions/install/snappy@94f29392187fe5082d1195a7d4cae3a7ddf09d9c # v1.2.1
+              uses: carabiner-dev/actions/install/snappy@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3
+              with:
+                  install-dir: /home/runner/.carabiner
 
             - name: Install ampel
-              uses: carabiner-dev/actions/install/ampel@94f29392187fe5082d1195a7d4cae3a7ddf09d9c # v1.2.1
+              uses: carabiner-dev/actions/install/ampel@2a4b2cd115ede14629b03ef7e77586d3269d4c72 # v1.2.3
+              with:
+                  install-dir: /home/runner/.carabiner
 
             - name: Install conftest
               run: go install github.com/open-policy-agent/conftest@v0.68.2