diff --git a/template.yml b/template.yml
index 9ed09bf4710c1031a8ca0b8a1cf7851f7e6eb0ad..30b718e9714611481f93725558e9a7b97909b0c2 100644
--- a/template.yml
+++ b/template.yml
@@ -20,6 +20,10 @@ spec:
       default: .
     key:
       default: "bazelisk-1"
+    variables:
+      default: |
+        CI_PROJECT_DIR
+        CI_PROJECT_ID
 ---
 .bazelisk-fragment:
   rc:
@@ -27,8 +31,12 @@ spec:
     - |
       # Copying Bazel run commands
       set -euo pipefail
+      VARIABLES="${VARIABLES-$[[inputs.variables]]}"
       while IFS= read -r LINE; do
-        printf '%s\n' "${LINE//\$\{CI_PROJECT_DIR\}/${CI_PROJECT_DIR}}" >> "$[[inputs.dst]]"
+        for VARIABLE in ${VARIABLES}; do
+            LINE="${LINE//\$\{${VARIABLE}\}/${!VARIABLE}}"
+        done
+        printf '%s\n' "${LINE}" >> "$[[inputs.dst]]"
       done < "$[[inputs.src]]"
     - popd
   execute:
@@ -55,6 +63,7 @@ spec:
 
 .bazelisk:
   image: "$[[inputs.image]]:$[[inputs.tag]]"
+  needs: []
   variables:
     ROOT: "$[[inputs.root]]"
     BAZELISK_HOME: "${CI_PROJECT_DIR}/.cache/bazelisk"
@@ -74,3 +83,9 @@ spec:
     when: always
     reports:
       junit: "${ROOT}/bazel-testlogs/**/test.xml"
+  rules:
+    - if: $CI_MERGE_REQUEST_IID
+    - if: $CI_COMMIT_TAG
+    - if: $CI_COMMIT_REF_PROTECTED == "true"
+    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+    - if: $CI_FORCE == "true"