diff --git a/.gitea/workflows/build-kaniko-act.yml b/.gitea/workflows/build-kaniko-act.yml
index 449f538..7f2b217 100644
--- a/.gitea/workflows/build-kaniko-act.yml
+++ b/.gitea/workflows/build-kaniko-act.yml
@@ -19,10 +19,14 @@ jobs:
   build:
     runs-on: ubuntu-latest
     container:
-      # Self-hosting: the current kaniko-act builds its own successor. The very
-      # first org build ran from `mikkeli/kaniko-act:v1.23.2-r2` instead, since
-      # this path did not exist yet.
-      image: pi5-16.local:3005/novoyuuparosk-wiki/kaniko-act:v1.23.2-r2
+      # The `mikkeli` copy is the only known-good kaniko-act: it was built on
+      # the host with docker. The org copy this workflow produced exits 0 but
+      # lacks /tmp, so it cannot build anything — do not point here at it.
+      #
+      # This workflow is consequently NOT usable as-is for a version bump. Fix
+      # ci/Dockerfile.kaniko-act to force /tmp to materialise first, or build
+      # on the host. Kept because the destination and auth wiring are correct.
+      image: pi5-16.local:3005/mikkeli/kaniko-act:v1.23.2-r2
 
     steps:
       - name: Fetch source, build, push