diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 14ba83d..8fe5fda 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -16,15 +16,17 @@ jobs:
 
       - name: Install dependencies
         run: |
-          apt-get update -qq
-          apt-get install -y -qq make git wget unzip
+          apt-get update
+          apt-get install -y -qq make git wget
 
       - name: Install Godot
         run: |
           wget -q https://github.com/godotengine/godot/releases/download/4.4.1-stable/Godot_v4.4.1-stable_linux.x86_64.zip
-          unzip -q Godot_v4.4.1-stable_linux.x86_64.zip
+          # python3 instead of unzip: the runner's apt index goes stale and the
+          # pinned unzip deb 404s in the security pool.
+          python3 -m zipfile -e Godot_v4.4.1-stable_linux.x86_64.zip godot-dir
           mkdir -p "$HOME/.local/bin"
-          mv Godot_v4.4.1-stable_linux.x86_64 "$HOME/.local/bin/godot"
+          mv godot-dir/Godot_v4.4.1-stable_linux.x86_64 "$HOME/.local/bin/godot"
           chmod +x "$HOME/.local/bin/godot"
           echo "$HOME/.local/bin" >> "$GITHUB_PATH"