diff --git a/.ansible-lint b/.ansible-lint
index 54b084c..40cdfd7 100644
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -12,6 +12,7 @@ profile: shared # min, basic, moderate,safety, shared, production
 # option are parsed relative to the CWD of execution.
 exclude_paths:
   - test*.yml
+  - .github/
   # - .cache/ # implicit unless exclude_paths is defined in config
   # - test/fixtures/formatting-before/
   # - test/fixtures/formatting-prettier/
@@ -52,8 +53,11 @@ use_default_rules: true
 # the use of skip_list below because that will hide violations from the output.
 # When putting ignores inside the ignore file, they are marked as ignored, but
 # still visible, making it easier to address later.
-skip_list: []
-#  - skip_this_tag
+
+# we are deliberately not idempotent in ART test runs, so ignore these:
+skip_list:
+  - no-changed-when
+  - no-handler
 
 # Ansible-lint does not automatically load rules that have the 'opt-in' tag.
 # You must enable opt-in rules by listing each rule 'id' below.
@@ -72,11 +76,11 @@ enable_list:
 
 # Ansible-lint does not fail on warnings from the rules or tags listed below
 warn_list:
-  - no-changed-when
-  - no-handler
   - yaml[line-length]
   - yaml[truthy]
   - experimental # experimental is included in the implicit list
+  # - no-changed-when
+  # - no-handler
   # - role-name
   # - yaml[document-start]  # you can also use sub-rule matches