diff --git a/.bazelci/presubmit.yml b/.bazelci/presubmit.yml
index 6457363ccd..b88106c409 100644
--- a/.bazelci/presubmit.yml
+++ b/.bazelci/presubmit.yml
@@ -56,6 +56,8 @@ buildifier:
     - "--noenable_bzlmod"
     - "--enable_workspace"
     - "--build_tag_filters=-integration-test"
+    # Reproduce what we found in https://github.com/bazelbuild/bazel/pull/26587#issuecomment-3175514081
+    - "--incompatible_strict_action_env"
   bazel: 7.x
 .common_bazelinbazel_config: &common_bazelinbazel_config
     build_flags:
diff --git a/examples/bzlmod/.bazelrc b/examples/bzlmod/.bazelrc
index ca83047ccc..e6398b8240 100644
--- a/examples/bzlmod/.bazelrc
+++ b/examples/bzlmod/.bazelrc
@@ -7,4 +7,6 @@ test --test_output=errors --enable_runfiles
 
 # Windows requires these for multi-python support:
 build --enable_runfiles
+build --incompatible_strict_action_env
+
 common:bazel7.x --incompatible_python_disallow_native_rules