diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
index 4dd7e67741..7c99c7476c 100644
--- a/.github/workflows/linter.yml
+++ b/.github/workflows/linter.yml
@@ -15,9 +15,6 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
         id: filter
-        env:
-          # Node 24 (forced for node20 actions) may not trust system CAs by default.
-          NODE_OPTIONS: --use-system-ca
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 2b06695a78..e3a34e94c5 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -15,9 +15,6 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
         id: filter
-        env:
-          # Node 24 (forced for node20 actions) may not trust system CAs by default.
-          NODE_OPTIONS: --use-system-ca
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
diff --git a/.github/workflows/type-checker.yml b/.github/workflows/type-checker.yml
index c064931b34..9cb6889247 100644
--- a/.github/workflows/type-checker.yml
+++ b/.github/workflows/type-checker.yml
@@ -15,9 +15,6 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
         id: filter
-        env:
-          # Node 24 (forced for node20 actions) may not trust system CAs by default.
-          NODE_OPTIONS: --use-system-ca
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")
diff --git a/.github/workflows/vulnerability-scan.yml b/.github/workflows/vulnerability-scan.yml
index 8ce2e72838..0c760c6baa 100644
--- a/.github/workflows/vulnerability-scan.yml
+++ b/.github/workflows/vulnerability-scan.yml
@@ -23,9 +23,6 @@ jobs:
       - uses: dorny/paths-filter@d1c1ffe0248fe513906c8e24db8ea791d46f8590 # v3
         id: filter
         if: github.event_name == 'pull_request'
-        env:
-          # Node 24 (forced for node20 actions) may not trust system CAs by default.
-          NODE_OPTIONS: --use-system-ca
         with:
           # Exclusion-only patterns match every non-excluded file under the
           # default "some" quantifier. Require all patterns (including "**")