diff --git a/.gitea/workflows/publish.yaml b/.gitea/workflows/publish.yaml
index bb38dcf..b57fde3 100644
--- a/.gitea/workflows/publish.yaml
+++ b/.gitea/workflows/publish.yaml
@@ -46,7 +46,8 @@ jobs:
       - name: Install apko
         run: |
           APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${{ env.APKO_VERSION }}/apko_${{ env.APKO_VERSION }}_linux_${APKO_ARCH}.tar.gz" \
+          APKO_VER="${{ env.APKO_VERSION }}"
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${APKO_VER}/apko_${APKO_VER}_linux_${APKO_ARCH}.tar.gz" \
             -o /tmp/apko.tar.gz
           tar xzf /tmp/apko.tar.gz --strip-components=1 -C /usr/local/bin
           rm /tmp/apko.tar.gz
diff --git a/.gitea/workflows/rebuild.yaml b/.gitea/workflows/rebuild.yaml
index 2290f28..ec4ae67 100644
--- a/.gitea/workflows/rebuild.yaml
+++ b/.gitea/workflows/rebuild.yaml
@@ -38,7 +38,8 @@ jobs:
       - name: Install apko
         run: |
           APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${{ env.APKO_VERSION }}/apko_${{ env.APKO_VERSION }}_linux_${APKO_ARCH}.tar.gz" \
+          APKO_VER="${{ env.APKO_VERSION }}"
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${APKO_VER}/apko_${APKO_VER}_linux_${APKO_ARCH}.tar.gz" \
             -o /tmp/apko.tar.gz
           tar xzf /tmp/apko.tar.gz --strip-components=1 -C /usr/local/bin
           rm /tmp/apko.tar.gz
diff --git a/.gitea/workflows/scout.yaml b/.gitea/workflows/scout.yaml
index 8acf109..b7222d7 100644
--- a/.gitea/workflows/scout.yaml
+++ b/.gitea/workflows/scout.yaml
@@ -54,7 +54,8 @@ jobs:
         if: steps.should_run.outputs.run == 'true'
         run: |
           APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${{ env.APKO_VERSION }}/apko_${{ env.APKO_VERSION }}_linux_${APKO_ARCH}.tar.gz" \
+          APKO_VER="${{ env.APKO_VERSION }}"
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${APKO_VER}/apko_${APKO_VER}_linux_${APKO_ARCH}.tar.gz" \
             -o /tmp/apko.tar.gz
           tar xzf /tmp/apko.tar.gz --strip-components=1 -C /usr/local/bin
           rm /tmp/apko.tar.gz
diff --git a/.gitea/workflows/update-check.yaml b/.gitea/workflows/update-check.yaml
index 8358047..aa319c2 100644
--- a/.gitea/workflows/update-check.yaml
+++ b/.gitea/workflows/update-check.yaml
@@ -28,7 +28,8 @@ jobs:
       - name: Install apko
         run: |
           APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${{ env.APKO_VERSION }}/apko_${{ env.APKO_VERSION }}_linux_${APKO_ARCH}.tar.gz" \
+          APKO_VER="${{ env.APKO_VERSION }}"
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${APKO_VER}/apko_${APKO_VER}_linux_${APKO_ARCH}.tar.gz" \
             -o /tmp/apko.tar.gz
           tar xzf /tmp/apko.tar.gz --strip-components=1 -C /usr/local/bin
           rm /tmp/apko.tar.gz
@@ -126,7 +127,8 @@ jobs:
       - name: Install apko
         run: |
           APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${{ env.APKO_VERSION }}/apko_${{ env.APKO_VERSION }}_linux_${APKO_ARCH}.tar.gz" \
+          APKO_VER="${{ env.APKO_VERSION }}"
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/download/v${APKO_VER}/apko_${APKO_VER}_linux_${APKO_ARCH}.tar.gz" \
             -o /tmp/apko.tar.gz
           tar xzf /tmp/apko.tar.gz --strip-components=1 -C /usr/local/bin
           rm /tmp/apko.tar.gz