diff --git a/build-plugin/action.yml b/build-plugin/action.yml
index 2729d02e..7c1a9e4b 100644
--- a/build-plugin/action.yml
+++ b/build-plugin/action.yml
@@ -68,7 +68,7 @@ runs:
   steps:
     - name: Package plugin
       id: "package-plugin"
-      uses: grafana/plugin-actions/package-plugin@main # zizmor: ignore[unpinned-uses]
+      uses: grafana/plugin-actions/package-plugin@sunker/skip-validate-plugin-testing # zizmor: ignore[unpinned-uses]
       with:
         policy_token: ${{ inputs.policy_token }}
         sign_root_urls: ${{ inputs.sign_root_urls }}
diff --git a/package-plugin/action.yml b/package-plugin/action.yml
index de3fa2c4..09f592e4 100644
--- a/package-plugin/action.yml
+++ b/package-plugin/action.yml
@@ -162,6 +162,7 @@ runs:
         PLUGIN_ARCHIVE_SHA1SUM: ${{ steps.metadata.outputs.archive-sha1sum }}
 
     - name: Validate plugin
+      if: false # temporarily disabled for testing, do not merge
       run: |
         npx -y @grafana/plugin-validator@latest -sourceCodeUri file://./ $PLUGIN_ARCHIVE
       shell: bash