diff --git a/.gitea/workflows/publish-images.yml b/.gitea/workflows/publish-images.yml
index 0cb4bd2..bb09832 100644
--- a/.gitea/workflows/publish-images.yml
+++ b/.gitea/workflows/publish-images.yml
@@ -34,17 +34,27 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+
       - name: Test source
         shell: bash
         run: |
           set -euo pipefail
           go test ./...
           go vet ./...
-          python3 -m pip install --break-system-packages -e '.[test]'
+          python3 -m venv /tmp/test-venv
+          source /tmp/test-venv/bin/activate
+          python3 -m pip install -e '.[test]'
           pytest -q
           python3 -m compileall -q src tests
-          apt-get update
-          apt-get install --yes --no-install-recommends shellcheck
+          sudo apt-get update
+          sudo apt-get install --yes --no-install-recommends shellcheck
           shellcheck scripts/*
 
       - name: Build and publish