diff --git a/.github/actions/hash-rust/action.yml b/.github/actions/hash-rust/action.yml
index 2026f0e905..c77a5f1740 100644
--- a/.github/actions/hash-rust/action.yml
+++ b/.github/actions/hash-rust/action.yml
@@ -40,9 +40,12 @@ runs:
   steps:
     - shell: bash
       id: build
+      env:
+        INPUTS_DIR: ${{ inputs.dir }}
+        INPUTS_IMAGE: ${{ inputs.image }}
       run: |
         GITHUB_TEMP_DIR=$(dirname "$GITHUB_OUTPUT")
-        docker run --rm -i -e GITHUB_OUTPUT -v ${GITHUB_TEMP_DIR}:${GITHUB_TEMP_DIR} -v ${{ inputs.dir }}:/src ${{ inputs.image }} /bin/bash <<-'EOF'
+        docker run --rm -i -e GITHUB_OUTPUT -v "${GITHUB_TEMP_DIR}:${GITHUB_TEMP_DIR}" -v "$INPUTS_DIR:/src" "$INPUTS_IMAGE" /bin/bash <<-'EOF'
           set -e
           ${{ inputs.setup }}
           cd /src
diff --git a/.github/actions/lint-rust/action.yml b/.github/actions/lint-rust/action.yml
index f5325ad271..263bad77a7 100644
--- a/.github/actions/lint-rust/action.yml
+++ b/.github/actions/lint-rust/action.yml
@@ -13,11 +13,13 @@ runs:
   steps:
     - name: Clippy check
       shell: bash
+      env:
+        MANIFEST_PATH: ${{ inputs.manifest_path }}
       run: |
         cargo clippy \
           --all-features \
           --locked \
-          --manifest-path ${{ inputs.manifest_path }} \
+          --manifest-path "$MANIFEST_PATH" \
           -- \
           -D warnings \
           -D clippy::dbg_macro \
@@ -25,4 +27,6 @@ runs:
 
     - name: Formatting check
       shell: bash
-      run: cargo fmt --all --manifest-path ${{ inputs.manifest_path }} -- --check
+      env:
+        MANIFEST_PATH: ${{ inputs.manifest_path }}
+      run: cargo fmt --all --manifest-path "$MANIFEST_PATH" -- --check
diff --git a/.github/actions/test-rust/action.yml b/.github/actions/test-rust/action.yml
index 72ea3cb678..0f041b53a7 100644
--- a/.github/actions/test-rust/action.yml
+++ b/.github/actions/test-rust/action.yml
@@ -15,10 +15,11 @@ runs:
 
     - name: Unit tests with coverage
       shell: bash
-      run: cargo tarpaulin --out Xml --avoid-cfg-tarpaulin --manifest-path ${{ inputs.manifest_path }} -- --test-threads 1
+      run: cargo tarpaulin --out Xml --avoid-cfg-tarpaulin --manifest-path "$MANIFEST_PATH" -- --test-threads 1
       env:
         # Required as tarpaulin doesn't honor .cargo/config.
         RUSTFLAGS: -C target-feature=+aes,+ssse3
+        MANIFEST_PATH: ${{ inputs.manifest_path }}
 
     - name: Upload to codecov.io
       uses: codecov/codecov-action@v2.1.0