diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index abc75c894b9..6f471e953a7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -245,8 +245,14 @@ jobs:
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       with:
         path: AuthenticodeLint
-        ref: ccfaec53ee5c1b14f029cb8156e0653c530f8b65
-        repository: vcsjones/AuthenticodeLint
+        ref: ae44826fdcebaa671b06591ea0b3b47fc946b79c
+        repository: martincostello/AuthenticodeLint
+        submodules: recursive
+
+    - name: Setup .NET SDK
+      uses: actions/setup-dotnet@3447fd6a9f9e57506b15f895c5b76d3b197dc7c2 # v3.2.0
+      with:
+        global-json-file: AuthenticodeLint/global.json
 
     - name: Validate signatures
       shell: pwsh
@@ -256,7 +262,12 @@ jobs:
         $artifacts = Join-Path $authlintSource "artifacts"
         $authlint = Join-Path $artifacts "authlint.exe"
 
-        dotnet publish $authLintProject --configuration Release --output $artifacts --runtime win-x64 --self-contained false /p:NoWarn=CS8604
+        dotnet publish $authLintProject `
+          --configuration Release `
+          --output $artifacts `
+          --runtime win-x64 `
+          --self-contained false `
+          /p:NoWarn=NU1902
 
         if ($LASTEXITCODE -ne 0) {
           throw "Failed to publish AuthenticodeLint."