diff --git a/.gitea/workflows/publish.yaml b/.gitea/workflows/publish.yaml
index 72ae1be..4311883 100644
--- a/.gitea/workflows/publish.yaml
+++ b/.gitea/workflows/publish.yaml
@@ -42,7 +42,9 @@ jobs:
 
       - name: Install apko
         run: |
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_$(uname -s)_$(uname -m).tar.gz" | tar xz -C /usr/local/bin apko
+          APKO_OS=$(uname -s | tr '[:upper:]' '[:lower:]')
+          APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_${APKO_OS}_${APKO_ARCH}.tar.gz" | tar xz -C /usr/local/bin apko
 
       - name: Login to Docker Registry
         uses: docker/login-action@v3
diff --git a/.gitea/workflows/rebuild.yaml b/.gitea/workflows/rebuild.yaml
index cb37216..9b5195c 100644
--- a/.gitea/workflows/rebuild.yaml
+++ b/.gitea/workflows/rebuild.yaml
@@ -34,7 +34,9 @@ jobs:
 
       - name: Install apko
         run: |
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_$(uname -s)_$(uname -m).tar.gz" | tar xz -C /usr/local/bin apko
+          APKO_OS=$(uname -s | tr '[:upper:]' '[:lower:]')
+          APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_${APKO_OS}_${APKO_ARCH}.tar.gz" | tar xz -C /usr/local/bin apko
 
       - name: Login to Docker Registry
         uses: docker/login-action@v3
diff --git a/.gitea/workflows/scout.yaml b/.gitea/workflows/scout.yaml
index 5584d71..22cee68 100644
--- a/.gitea/workflows/scout.yaml
+++ b/.gitea/workflows/scout.yaml
@@ -52,7 +52,9 @@ jobs:
       - name: Install apko
         if: steps.should_run.outputs.run == 'true'
         run: |
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_$(uname -s)_$(uname -m).tar.gz" | tar xz -C /usr/local/bin apko
+          APKO_OS=$(uname -s | tr '[:upper:]' '[:lower:]')
+          APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_${APKO_OS}_${APKO_ARCH}.tar.gz" | tar xz -C /usr/local/bin apko
 
       - name: Build image locally
         if: steps.should_run.outputs.run == 'true'
diff --git a/.gitea/workflows/update-check.yaml b/.gitea/workflows/update-check.yaml
index 77ee6e2..0408c95 100644
--- a/.gitea/workflows/update-check.yaml
+++ b/.gitea/workflows/update-check.yaml
@@ -24,7 +24,9 @@ jobs:
 
       - name: Install apko
         run: |
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_$(uname -s)_$(uname -m).tar.gz" | tar xz -C /usr/local/bin apko
+          APKO_OS=$(uname -s | tr '[:upper:]' '[:lower:]')
+          APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_${APKO_OS}_${APKO_ARCH}.tar.gz" | tar xz -C /usr/local/bin apko
 
       - name: Check for Wolfi package updates
         id: check
@@ -83,11 +85,11 @@ jobs:
           echo "Latest Flutter stable: $LATEST"
           echo "new_version=$LATEST" >> "$GITHUB_OUTPUT"
 
-          # Check if a release with this tag already exists
-          EXISTING=$(curl -fsSL \
+          # Check if a release with this tag already exists (use -sS, not -f, so 404 doesn't fail)
+          EXISTING=$(curl -sS \
             -H "Authorization: token ${{ secrets.GITEA_TOKEN }}" \
             "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/releases/tags/v${LATEST}" \
-            2>/dev/null | jq -r '.tag_name // empty')
+            | jq -r '.tag_name // empty')
 
           if [ -n "$EXISTING" ]; then
             echo "Release v${LATEST} already exists, skipping"
@@ -120,7 +122,9 @@ jobs:
 
       - name: Install apko
         run: |
-          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_$(uname -s)_$(uname -m).tar.gz" | tar xz -C /usr/local/bin apko
+          APKO_OS=$(uname -s | tr '[:upper:]' '[:lower:]')
+          APKO_ARCH=$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/')
+          curl -fsSL "https://github.com/chainguard-dev/apko/releases/latest/download/apko_${APKO_OS}_${APKO_ARCH}.tar.gz" | tar xz -C /usr/local/bin apko
 
       - name: Login to Docker Registry
         uses: docker/login-action@v3