diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
new file mode 100644
index 000000000000..71bbb1d2cad5
--- /dev/null
+++ b/.github/actionlint.yaml
@@ -0,0 +1,4 @@
+self-hosted-runner:
+    labels:
+        # Stops incorrect warning of android-large-runner being used
+        - android-large-runner
\ No newline at end of file
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b55b82aa3706..4e850e1cd98c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -141,7 +141,7 @@ jobs:
       - name: Decode secret
         env:
           FLANK: ${{ secrets.FLANK }}
-        run: echo $FLANK > flank.json
+        run: echo "$FLANK" > flank.json
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v3
@@ -185,7 +185,7 @@ jobs:
         if: |
           failure() &&
           steps.check-alignment.outcome == 'success'
-        run: cat build/fladle/fladleResults/HtmlErrorReport.html | cut -d\`  -f2 >> results.json
+        run: cut -d\`  -f2 < build/fladle/fladleResults/HtmlErrorReport.html >> results.json
 
       - name: Print failure report
         if: |
diff --git a/.github/workflows/external-css-tests.yml b/.github/workflows/external-css-tests.yml
index 318e48284f73..dbd8b06add61 100644
--- a/.github/workflows/external-css-tests.yml
+++ b/.github/workflows/external-css-tests.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Decode secret
         env:
           FLANK: ${{ secrets.FLANK }}
-        run: echo $FLANK > flank.json
+        run: echo "$FLANK" > flank.json
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v3
@@ -66,7 +66,7 @@ jobs:
 
       - name: Generate json file with failures
         if: ${{ failure() }}
-        run: cat build/fladle/fladleResults/HtmlErrorReport.html | cut -d\`  -f2 >> results.json
+        run: cut -d\`  -f2 < build/fladle/fladleResults/HtmlErrorReport.html >> results.json
 
       - name: Print failure report
         if: ${{ failure() }}
diff --git a/.github/workflows/external-ref-tests.yml b/.github/workflows/external-ref-tests.yml
index 1e2eecc82cea..a58b59bec321 100644
--- a/.github/workflows/external-ref-tests.yml
+++ b/.github/workflows/external-ref-tests.yml
@@ -89,7 +89,7 @@ jobs:
       - name: Decode secret
         env:
           FLANK: ${{ secrets.FLANK }}
-        run: echo $FLANK > flank.json
+        run: echo "$FLANK" > flank.json
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v3
@@ -106,7 +106,7 @@ jobs:
 
       - name: Generate json file with failures
         if: ${{ failure() }}
-        run: cat build/fladle/fladleResults/HtmlErrorReport.html | cut -d\`  -f2 >> results.json
+        run: cut -d\`  -f2 < build/fladle/fladleResults/HtmlErrorReport.html >> results.json
 
       - name: Print failure report
         if: ${{ failure() }}
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index a6b5efc71e5a..9ac7cd3ba0de 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -132,7 +132,7 @@ jobs:
       - name: Decode secret
         env:
           FLANK: ${{ secrets.FLANK }}
-        run: echo $FLANK > flank.json
+        run: echo "$FLANK" > flank.json
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v3
@@ -149,7 +149,7 @@ jobs:
 
       - name: Generate json file with failures
         if: ${{ failure() }}
-        run: cat build/fladle/fladleResults/HtmlErrorReport.html | cut -d\`  -f2 >> results.json
+        run: cut -d\`  -f2 < build/fladle/fladleResults/HtmlErrorReport.html >> results.json
 
       - name: Print failure report
         if: ${{ failure() }}
diff --git a/.github/workflows/privacy.yml b/.github/workflows/privacy.yml
index fd1a445e3452..76985658894f 100644
--- a/.github/workflows/privacy.yml
+++ b/.github/workflows/privacy.yml
@@ -49,7 +49,7 @@ jobs:
       - name: Decode secret
         env:
           FLANK: ${{ secrets.FLANK }}
-        run: echo $FLANK > flank.json
+        run: echo "$FLANK" > flank.json
 
       - name: Setup Gradle
         uses: gradle/actions/setup-gradle@v3
@@ -66,7 +66,7 @@ jobs:
 
       - name: Generate json file with failures
         if: ${{ failure() }}
-        run: cat build/fladle/fladleResults/HtmlErrorReport.html | cut -d\`  -f2 >> results.json
+        run: cut -d\`  -f2 < build/fladle/fladleResults/HtmlErrorReport.html >> results.json
 
       - name: Print failure report
         if: ${{ failure() }}
diff --git a/.github/workflows/validate_workflows.yml b/.github/workflows/validate_workflows.yml
index 1f55b4e3db03..7913163c33d6 100644
--- a/.github/workflows/validate_workflows.yml
+++ b/.github/workflows/validate_workflows.yml
@@ -26,4 +26,5 @@ jobs:
           github_token: ${{ secrets.GT_DAXMOBILE }}
           reporter: github-pr-review
           level: warning
-          fail_level: warning
\ No newline at end of file
+          fail_level: warning
+          actionlint_flags: --config-file .github/actionlint.yaml
\ No newline at end of file