diff --git a/deny.toml b/deny.toml
index 44007a33..80aa2215 100644
--- a/deny.toml
+++ b/deny.toml
@@ -41,7 +41,7 @@ unused-allowed-license = "allow"
 
 [bans]
 multiple-versions = "warn"
-wildcards = "allow"
+wildcards = "deny"
 
 [sources]
 unknown-registry = "deny"
diff --git a/scripts/ci/quality_gate_strict.sh b/scripts/ci/quality_gate_strict.sh
index 48ef2433..ed595964 100755
--- a/scripts/ci/quality_gate_strict.sh
+++ b/scripts/ci/quality_gate_strict.sh
@@ -1,6 +1,9 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# Ensure we are running from the repository root
+cd "$(git rev-parse --show-toplevel)"
+
 echo "==> fmt check"
 cargo fmt --all -- --check