diff --git a/.github/workflows/actions-security.yml b/.github/workflows/actions-security.yml
index 348a514..59addac 100644
--- a/.github/workflows/actions-security.yml
+++ b/.github/workflows/actions-security.yml
@@ -30,11 +30,11 @@ jobs:
       - name: Run actionlint
         uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2.
         with:
-          # release.yml is generated by dist. Keep linting it for real
-          # workflow issues, but ignore generated ShellCheck style/info noise.
+          # release.yml is generated by cargo-dist. Keep actionlint enabled for it,
+          # but ignore generated ShellCheck style/info noise from that file only.
           flags: >-
-            -ignore '\.github/workflows/release\.yml:[0-9]+:[0-9]+: shellcheck reported issue .*SC2086'
-            -ignore '\.github/workflows/release\.yml:[0-9]+:[0-9]+: shellcheck reported issue .*SC2129'
+            -ignore \.github/workflows/release\.yml:[0-9]+:[0-9]+:.*SC2086
+            -ignore \.github/workflows/release\.yml:[0-9]+:[0-9]+:.*SC2129
   zizmor:
     name: zizmor
     runs-on: ubuntu-latest
diff --git a/.github/workflows/supply-chain.yml b/.github/workflows/supply-chain.yml
index 192e695..5f4eb2d 100644
--- a/.github/workflows/supply-chain.yml
+++ b/.github/workflows/supply-chain.yml
@@ -63,8 +63,8 @@ jobs:
       - name: Run actionlint
         uses: raven-actions/actionlint@205b530c5d9fa8f44ae9ed59f341a0db994aa6f8 # v2
         with:
-          # release.yml is generated by dist. Keep linting it for real
-          # workflow issues, but ignore generated ShellCheck style/info noise.
+          # release.yml is generated by cargo-dist. Keep actionlint enabled for it,
+          # but ignore generated ShellCheck style/info noise from that file only.
           flags: >-
-            -ignore '\.github/workflows/release\.yml:[0-9]+:[0-9]+: shellcheck reported issue .*SC2086'
-            -ignore '\.github/workflows/release\.yml:[0-9]+:[0-9]+: shellcheck reported issue .*SC2129'
+            -ignore \.github/workflows/release\.yml:[0-9]+:[0-9]+:.*SC2086
+            -ignore \.github/workflows/release\.yml:[0-9]+:[0-9]+:.*SC2129