diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 5ad555b..a7a75e9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,6 +18,7 @@ jobs:
     steps:
       - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
         with:
+          disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
             azure.archive.ubuntu.com:80
@@ -29,8 +30,6 @@ jobs:
             static.rust-lang.org:443
       - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
       - run: |
-          sudo apt-get update
-          sudo apt-get install -y curl
           curl https://sh.rustup.rs -sSf | sh -s -- -y
           export PATH="$HOME/.cargo/bin:$PATH"
           rustup default stable
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index acd9e56..058bea8 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,7 @@ jobs:
     steps:
       - uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6
         with:
+          disable-sudo: true
           egress-policy: block
           allowed-endpoints: >
             azure.archive.ubuntu.com:80
@@ -30,8 +31,6 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29
       - run: |
-          sudo apt-get update
-          sudo apt-get install -y curl
           curl https://sh.rustup.rs -sSf | sh -s -- -y
           export PATH="$HOME/.cargo/bin:$PATH"
           rustup default stable