diff --git a/.github/workflows/dotnet-coverage.yml b/.github/workflows/dotnet-coverage.yml
index e32d9ab..2e15dff 100644
--- a/.github/workflows/dotnet-coverage.yml
+++ b/.github/workflows/dotnet-coverage.yml
@@ -19,15 +19,25 @@ jobs:
     name: "Run Coverage"
     strategy:
       fail-fast: false
-      matrix:
-        os: ["windows-2025"]
-    runs-on: ${{ matrix.os }}
+    runs-on: "windows-2025"
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Setup .NET
+        id: setup-dotnet
         uses: actions/setup-dotnet@v6
         with:
           dotnet-version: 10.0.x
+      - name: Enforce .NET SDK Version
+        shell: bash
+        run: |
+          cat <<'EOF' > ./global.json
+          {
+            "sdk": {
+              "version": "${{ steps.setup-dotnet.outputs.dotnet-version }}",
+              "rollForward": "latestPatch"
+            }
+          }
+          EOF
       - name: Tooling check
         run: >
           dotnet --version
diff --git a/.github/workflows/make-coverage-html.yml b/.github/workflows/make-coverage-html.yml
index fe654ce..6396710 100644
--- a/.github/workflows/make-coverage-html.yml
+++ b/.github/workflows/make-coverage-html.yml
@@ -15,13 +15,25 @@ on: # yamllint disable-line rule:truthy
 jobs:
   make-coverage-html:
     name: "Run make coverage/html and verify coverage HTML"
-    runs-on: windows-2025
+    runs-on: "windows-2025"
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: Setup .NET
+        id: setup-dotnet
         uses: actions/setup-dotnet@v6
         with:
           dotnet-version: 10.0.x
+      - name: Enforce .NET SDK Version
+        shell: bash
+        run: |
+          cat <<'EOF' > ./global.json
+          {
+            "sdk": {
+              "version": "${{ steps.setup-dotnet.outputs.dotnet-version }}",
+              "rollForward": "latestPatch"
+            }
+          }
+          EOF
       - name: Verify tooling
         run: |
           dotnet --version