diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 110c121..a035d8b 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -14,10 +14,15 @@ jobs:
     container:
       image: python:3.12-slim
     steps:
-      - name: Checkout
-        uses: actions/checkout@v4
+      - name: Install system dependencies
+        run: apt-get update && apt-get install -y --no-install-recommends git curl
 
-      - name: Install dependencies
+      - name: Checkout
+        run: |
+          git clone --depth 1 --branch "${{ github.ref_name }}" "${{ github.server_url }}/${{ github.repository }}.git" .
+          git checkout "${{ github.sha }}"
+
+      - name: Install Python dependencies
         run: pip install ansible ansible-bundler
 
       - name: Verify playbook syntax
@@ -46,12 +51,5 @@ jobs:
             -T bootstrap.run.sha256 \
             "${{ github.server_url }}/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/bootstrap.run.sha256"
 
-      # Alternative: Upload as artifact (for manual download)
-      - name: Upload artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: bootstrap-bundle
-          path: |
-            bootstrap.run
-            bootstrap.run.sha256
-          retention-days: 90
+      # Note: actions/upload-artifact requires Node.js, which isn't in python:3.12-slim.
+      # Artifacts are already uploaded to Gitea packages above.