diff --git a/.github/workflows/flowzone.yml b/.github/workflows/flowzone.yml
index 0339b8e..a05d165 100644
--- a/.github/workflows/flowzone.yml
+++ b/.github/workflows/flowzone.yml
@@ -23,15 +23,9 @@ jobs:
       )
     secrets: inherit
     with:
-      # FIXME: https://github.com/cloudflare/cfssl/issues/1287
-      # balena/ca-private-aarch64
       balena_slugs: |
-        balena/ca-private-amd64
+        balena/ca-private-amd64,
+        balena/ca-private-aarch64
       docker_images: |
         balena/ca-private,
         ghcr.io/balena-io/ca-private
-      required_status_checks: >
-        [
-          "Flowzone / All tests",
-          "Flowzone / All jobs"
-        ]
diff --git a/Dockerfile b/Dockerfile
index c9a976b..7b68981 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,5 @@
 # https://hub.docker.com/r/cfssl/cfssl
-# FIXME: revert to semver when https://github.com/cloudflare/cfssl/issues/1287 ships
-FROM cfssl/cfssl:nicky-docker-arch
+FROM cfssl/cfssl:v1.6.5
 
 RUN apt-get update && apt-get install -y --no-install-recommends \
     inotify-tools \