diff --git a/.github/workflows/rake.yml b/.github/workflows/rake.yml
index 5e50d18c..cc352e78 100644
--- a/.github/workflows/rake.yml
+++ b/.github/workflows/rake.yml
@@ -39,7 +39,8 @@ jobs:
         working-directory: ruby
         run: |
           pip install regex
-          bundle install --with=jsexec
+          bundle config set --local with jsexec
+          bundle install
 
       - name: RSpec
         working-directory: ruby
diff --git a/lib/interscript/compiler/ruby.rb b/lib/interscript/compiler/ruby.rb
index 5c672dfe..d4ac8889 100644
--- a/lib/interscript/compiler/ruby.rb
+++ b/lib/interscript/compiler/ruby.rb
@@ -1,3 +1,4 @@
+# rubocop:disable Style/GlobalVars, Security/Eval -- map-evaluation context globals; eval runs generated map code
 $main_binding = binding
 
 class Interscript::Compiler::Ruby < Interscript::Compiler
@@ -264,3 +265,4 @@ def self.reset_debug_data
     $map_debug = []
   end
 end
+# rubocop:enable Style/GlobalVars, Security/Eval
diff --git a/lib/interscript/utils/helpers.rb b/lib/interscript/utils/helpers.rb
index 6de26861..9c9c3476 100644
--- a/lib/interscript/utils/helpers.rb
+++ b/lib/interscript/utils/helpers.rb
@@ -1,3 +1,5 @@
+# rubocop:disable Style/GlobalVars
+# spec-support globals; deliberate process-level state
 module Interscript::Utils
   module Helpers
     def document name = nil, &block
@@ -37,3 +39,4 @@ def parse(map_name, **kwargs)
     end
   end
 end
+# rubocop:enable Style/GlobalVars