diff --git a/.github/workflow-gen/StepExtensions.cs b/.github/workflow-gen/StepExtensions.cs
index 4fe797f41..e5e6c8145 100644
--- a/.github/workflow-gen/StepExtensions.cs
+++ b/.github/workflow-gen/StepExtensions.cs
@@ -38,8 +38,7 @@ public static class StepExtensions
     public static void StepDotNetDevCerts(this Job job)
         => job.Step()
             .Name("Dotnet devcerts")
-            .Env(("SSL_CERT_DIR", "${{ env.HOME }}/.aspnet/dev-certs/trust"))
-            .Run("dotnet dev-certs https --trust");
+            .Run("SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust");
 
     public static void CachePlaywrightAssets(this Job job)
         => job.Step("playwright-cache")
diff --git a/.github/workflows/aspnetcore-authentication-jwtbearer-ci.yml b/.github/workflows/aspnetcore-authentication-jwtbearer-ci.yml
index 1da5aa1fc..87f505237 100644
--- a/.github/workflows/aspnetcore-authentication-jwtbearer-ci.yml
+++ b/.github/workflows/aspnetcore-authentication-jwtbearer-ci.yml
@@ -93,9 +93,7 @@ jobs:
     - name: Build
       run: dotnet build aspnetcore-authentication-jwtbearer.slnf --no-restore -c Release
     - name: Dotnet devcerts
-      run: dotnet dev-certs https --trust
-      env:
-        SSL_CERT_DIR: ${{ env.HOME }}/.aspnet/dev-certs/trust
+      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
     - name: Test - test/AspNetCore.Authentication.JwtBearer.Tests
       run: dotnet test test/AspNetCore.Authentication.JwtBearer.Tests -c Release --no-build --logger "console;verbosity=normal" --logger "trx;LogFileName=test/AspNetCore.Authentication.JwtBearer.Tests-tests.trx" --collect:"XPlat Code Coverage"
     - id: test-report-test-AspNetCore-Authentication-JwtBearer-Tests
diff --git a/.github/workflows/bff-ci.yml b/.github/workflows/bff-ci.yml
index 4d93818a9..b55003920 100644
--- a/.github/workflows/bff-ci.yml
+++ b/.github/workflows/bff-ci.yml
@@ -93,9 +93,7 @@ jobs:
     - name: Build
       run: dotnet build bff.slnf --no-restore -c Release
     - name: Dotnet devcerts
-      run: dotnet dev-certs https --trust
-      env:
-        SSL_CERT_DIR: ${{ env.HOME }}/.aspnet/dev-certs/trust
+      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
     - name: Test - test/Bff.Tests
       run: dotnet test test/Bff.Tests -c Release --no-build --logger "console;verbosity=normal" --logger "trx;LogFileName=test/Bff.Tests-tests.trx" --collect:"XPlat Code Coverage"
     - id: test-report-test-Bff-Tests
@@ -154,9 +152,7 @@ jobs:
       if: steps.playwright-cache.outputs.cache-hit != 'true'
       run: pwsh test/Hosts.Tests/bin/Release/net10.0/playwright.ps1 install --with-deps
     - name: Dotnet devcerts
-      run: dotnet dev-certs https --trust
-      env:
-        SSL_CERT_DIR: ${{ env.HOME }}/.aspnet/dev-certs/trust
+      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
     - name: Test - test/Hosts.Tests
       run: dotnet test test/Hosts.Tests -c Release --no-build --logger "console;verbosity=normal" --logger "trx;LogFileName=test/Hosts.Tests-tests.trx" --collect:"XPlat Code Coverage"
     - id: test-report-test-Hosts-Tests
diff --git a/.github/workflows/docs-mcp-ci.yml b/.github/workflows/docs-mcp-ci.yml
index e239cd353..28475789d 100644
--- a/.github/workflows/docs-mcp-ci.yml
+++ b/.github/workflows/docs-mcp-ci.yml
@@ -93,9 +93,7 @@ jobs:
     - name: Build
       run: dotnet build docs-mcp.slnf --no-restore -c Release
     - name: Dotnet devcerts
-      run: dotnet dev-certs https --trust
-      env:
-        SSL_CERT_DIR: ${{ env.HOME }}/.aspnet/dev-certs/trust
+      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
   playwright:
     name: Playwright tests
     if: (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name != github.repository) || (github.event_name == 'push') || (github.event_name == 'workflow_dispatch')
diff --git a/.github/workflows/identity-server-ci.yml b/.github/workflows/identity-server-ci.yml
index e38a9bd88..87a6b1957 100644
--- a/.github/workflows/identity-server-ci.yml
+++ b/.github/workflows/identity-server-ci.yml
@@ -93,9 +93,7 @@ jobs:
     - name: Build
       run: dotnet build identity-server.slnf --no-restore -c Release
     - name: Dotnet devcerts
-      run: dotnet dev-certs https --trust
-      env:
-        SSL_CERT_DIR: ${{ env.HOME }}/.aspnet/dev-certs/trust
+      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
     - name: Test - test/IdentityServer.IntegrationTests
       run: dotnet test test/IdentityServer.IntegrationTests -c Release --no-build --logger "console;verbosity=normal" --logger "trx;LogFileName=test/IdentityServer.IntegrationTests-tests.trx" --collect:"XPlat Code Coverage"
     - id: test-report-test-IdentityServer-IntegrationTests
@@ -168,9 +166,7 @@ jobs:
       if: steps.playwright-cache.outputs.cache-hit != 'true'
       run: pwsh test/IdentityServer.EndToEndTests/bin/Release/net10.0/playwright.ps1 install --with-deps
     - name: Dotnet devcerts
-      run: dotnet dev-certs https --trust
-      env:
-        SSL_CERT_DIR: ${{ env.HOME }}/.aspnet/dev-certs/trust
+      run: SSL_CERT_DIR=$HOME/.aspnet/dev-certs/trust dotnet dev-certs https --trust
     - name: Test - test/IdentityServer.EndToEndTests
       run: dotnet test test/IdentityServer.EndToEndTests -c Release --no-build --logger "console;verbosity=normal" --logger "trx;LogFileName=test/IdentityServer.EndToEndTests-tests.trx" --collect:"XPlat Code Coverage"
     - id: test-report-test-IdentityServer-EndToEndTests