diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 42544f2e..4f08eee2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -19,12 +19,11 @@ jobs:
           cd ~/macos-ci-setup
           ./create-vm-for-project.sh $VM_NAME $VM_IMAGE
           ./clone-repo-in-vm.sh "https://$MACOS_CI_SETUP_TOKEN@github.com/SRGSSR/fake-and-temporary-pa-for-runners.git" $VM_NAME
-          ./brew-fetch-and-sync.sh $VM_NAME mint shellcheck markdownlint-cli yamllint ffmpeg
+          ./brew-fetch-and-sync.sh $VM_NAME "mint shellcheck markdownlint-cli yamllint ffmpeg"
           ./run-vm-shell-command.sh $VM_NAME "brew install mint shellcheck markdownlint-cli yamllint ffmpeg"
           ./run-vm-shell-command.sh $VM_NAME "rbenv install --skip-existing 3.3.5"
           ./run-vm-shell-command.sh $VM_NAME "echo 'export PATH=\"$HOME/.rbenv/bin:$PATH\"' >> ~/.zshrc"
           ./run-vm-shell-command.sh $VM_NAME "rbenv init - >> ~/.zshrc"
-          ./run-vm-shell-command.sh $VM_NAME "source ~/.zshrc"
           ./run-vm-shell-command.sh $VM_NAME "rbenv global 3.3.5"
           ./run-vm-shell-command.sh $VM_NAME "sudo gem install bundler -v 2.5.22"
           ./run-vm-shell-command.sh $VM_NAME "curl --location https://github.com/shaka-project/shaka-packager/releases/download/v3.2.0/packager-osx-arm64 -o /opt/homebrew/bin/shaka-packager"
@@ -40,7 +39,7 @@ jobs:
         run: |
           cd ~/macos-ci-setup
           ./run-vm-shell-command.sh $VM_NAME "cd ~/_repo && rm -rf Configuration"
-          ./run-vm-shell-command.sh $VM_NAME "cd ~/_repo && Scripts/checkout-configuration.sh https://$MACOS_CI_SETUP_TOKEN@github.com/SRGSSR/pillarbox-apple-configuration.git dad52a4242c7997c179073caec03b8d6e718fc03 Configuration"
+          ./run-vm-shell-command.sh $VM_NAME "cd ~/_repo && Scripts/checkout-configuration.sh https://$MACOS_CI_SETUP_TOKEN@github.com/SRGSSR/pillarbox-apple-configuration.git certificate HEAD Configuration"
           ./run-vm-shell-command.sh $VM_NAME "cd ~/_repo && make setup"
 
   # check-quality: